[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-3968Date: (C)2014-06-16   (M)2023-12-22


The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x allows local guest HVM administrators to cause a denial of service (host crash) via a large number of crafted requests, which trigger an error messages to be logged.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.5
Exploit Score: 5.1
Impact Score: 6.9
 
CVSS V2 Metrics:
Access Vector: ADJACENT_NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE
  
Reference:
SECTRACK-1030322
BID-67794
BID-67824
FEDORA-2014-7408
FEDORA-2014-7423
GLSA-201504-04
http://www.openwall.com/lists/oss-security/2014/06/04/13
http://xenbits.xen.org/xsa/advisory-96.html
openSUSE-SU-2014:1279
openSUSE-SU-2014:1281

CPE    9
cpe:/o:opensuse:opensuse:13.1
cpe:/o:opensuse:opensuse:12.3
cpe:/o:xen:xen:4.2.3
cpe:/o:xen:xen:4.2.2
...
OVAL    18
oval:org.secpod.oval:def:108686
oval:org.secpod.oval:def:108802
oval:org.secpod.oval:def:108879
oval:org.secpod.oval:def:109222
...

© SecPod Technologies