CVE-2014-3714

Опубликовано: 19 мая 2014

Источник: nvd

CVSS2: 3.3

EPSS Низкий

Описание

The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit ARM guest kernel in an image, which triggers a buffer overflow.

Ссылки

http://www.openwall.com/lists/oss-security/2014/05/14/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/05/15/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/05/16/1
Mailing List
Third Party Advisory
http://www.securitytracker.com/id/1030252
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-95.html
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2014/05/14/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/05/15/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/05/16/1
Mailing List
Third Party Advisory
http://www.securitytracker.com/id/1030252
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-95.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00183

Низкий

3.3 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2014-3714

ubuntu

больше 11 лет назад

CVE-2014-3714

debian

больше 11 лет назад

The ARM image loading functionality in Xen 4.4.x does not properly val ...

GHSA-g8xj-5mrp-c94w

github

больше 3 лет назад

EPSS

Процентиль: 40%

0.00183

Низкий

3.3 Low

CVSS2

Дефекты

CWE-20