Lucene search

K
cve[email protected]CVE-2014-2580
HistoryApr 15, 2014 - 11:13 p.m.

CVE-2014-2580

2014-04-1523:13:00
CWE-399
web.nvd.nist.gov
21
xen
netback driver
linux
denial of service
cve-2014-2580
security vulnerability
nvd

5.8 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

25.6%

The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service (β€œscheduling while atomic” error and host crash) via a malformed packet, which causes a mutex to be taken when trying to disable the interface.

CPENameOperatorVersion
xen:xenxeneq-

5.8 Medium

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

25.6%