CVE-2014-3717

Опубликовано: 19 мая 2014

Источник: nvd

CVSS2: 3.3

EPSS Низкий

Описание

Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a denial of service (crash) via a crafted kernel, which triggers a buffer overflow.

Ссылки

http://www.openwall.com/lists/oss-security/2014/05/14/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/05/15/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/05/16/1
Mailing List
Third Party Advisory
http://www.securitytracker.com/id/1030252
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-95.html
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2014/05/14/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/05/15/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/05/16/1
Mailing List
Third Party Advisory
http://www.securitytracker.com/id/1030252
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-95.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00183

Низкий

3.3 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2014-3717

ubuntu

больше 11 лет назад

CVE-2014-3717

debian

больше 11 лет назад

Xen 4.4.x does not properly validate the load address for 64-bit ARM g ...

GHSA-5qq2-9j69-8qqc

github

больше 3 лет назад

EPSS

Процентиль: 40%

0.00183

Низкий

3.3 Low

CVSS2

Дефекты

CWE-20