CVE-2014-8867

Опубликовано: 01 дек. 2014

Источник: nvd

CVSS2: 4.9

EPSS Низкий

Описание

The acceleration support for the "REP MOVS" instruction in Xen 4.4.x, 3.2.x, and earlier lacks properly bounds checking for memory mapped I/O (MMIO) emulated in the hypervisor, which allows local HVM guests to cause a denial of service (host crash) via unspecified vectors.

Ссылки

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0783.html
Third Party Advisory
http://secunia.com/advisories/59949
Permissions Required
Third Party Advisory
http://secunia.com/advisories/62672
Permissions Required
Third Party Advisory
http://support.citrix.com/article/CTX200288
http://support.citrix.com/article/CTX201794
http://www.debian.org/security/2015/dsa-3140
Third Party Advisory
http://www.securityfocus.com/bid/71331
Third Party Advisory
VDB Entry
http://xenbits.xenproject.org/xsa/advisory-112.html
Patch
Vendor Advisory
https://security.gentoo.org/glsa/201504-04
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2015-0783.html
Third Party Advisory
http://secunia.com/advisories/59949
Permissions Required
Third Party Advisory
http://secunia.com/advisories/62672
Permissions Required
Third Party Advisory
http://support.citrix.com/article/CTX200288
http://support.citrix.com/article/CTX201794

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*

Версия до 3.2.0 (включая)

cpe:2.3:o:xen:xen:3.2.1:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:3.2.2:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:3.2.3:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.4.1:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00126

Низкий

4.9 Medium

CVSS2

Дефекты

CWE-17

Связанные уязвимости

CVE-2014-8867

ubuntu

больше 10 лет назад

CVE-2014-8867

redhat

больше 10 лет назад

CVE-2014-8867

debian

больше 10 лет назад

The acceleration support for the "REP MOVS" instruction in Xen 4.4.x, ...

GHSA-jj57-646v-244j

github

около 3 лет назад

ELSA-2015-0783

oracle-oval

около 10 лет назад

ELSA-2015-0783: kernel security and bug fix update (IMPORTANT)

EPSS

Процентиль: 33%

0.00126

Низкий

4.9 Medium

CVSS2

Дефекты

CWE-17