CVE-2014-8866

Опубликовано: 01 дек. 2014

Источник: nvd

CVSS2: 4.7

EPSS Низкий

Описание

The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on a 64-bit hypervisor, allows local 32-bit HVM guests to cause a denial of service (host crash) via vectors involving altering the high halves of registers while in 64-bit mode.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html
Third Party Advisory
http://secunia.com/advisories/59937
Permissions Required
Third Party Advisory
http://secunia.com/advisories/62672
Permissions Required
Third Party Advisory
http://support.citrix.com/article/CTX200288
http://support.citrix.com/article/CTX201794
Third Party Advisory
http://www.debian.org/security/2015/dsa-3140
Third Party Advisory
http://www.securityfocus.com/bid/71332
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-111.html
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201504-04
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html
Third Party Advisory
http://secunia.com/advisories/59937
Permissions Required
Third Party Advisory
http://secunia.com/advisories/62672
Permissions Required
Third Party Advisory
http://support.citrix.com/article/CTX200288
http://support.citrix.com/article/CTX201794
Third Party Advisory
http://www.debian.org/security/2015/dsa-3140
Third Party Advisory
http://www.securityfocus.com/bid/71332
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-111.html
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201504-04
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:xen:xen:3.3.0:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:3.3.1:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:3.3.2:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:3.4.0:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:3.4.1:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:3.4.2:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:3.4.3:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:3.4.4:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.0.1:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.0.2:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.0.3:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.0.4:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.1.4:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.1.5:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.1.6.1:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.2.2:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.2.3:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

EPSS

Процентиль: 26%

0.00093

Низкий

4.7 Medium

CVSS2

Дефекты

CWE-17

Связанные уязвимости

CVE-2014-8866

ubuntu

около 11 лет назад

CVE-2014-8866

redhat

около 11 лет назад

CVE-2014-8866

debian

около 11 лет назад

The compatibility mode hypercall argument translation in Xen 3.3.x thr ...

GHSA-gqm4-jx6m-62vq

github

больше 3 лет назад

SUSE-SU-2015:0940-1

suse-cvrf

около 13 лет назад

Security update for Xen

EPSS

Процентиль: 26%

0.00093

Низкий

4.7 Medium

CVSS2

Дефекты

CWE-17