Lucene search

K
cve[email protected]CVE-2014-2915
HistoryApr 24, 2014 - 2:55 p.m.

CVE-2014-2915

2014-04-2414:55:00
CWE-264
web.nvd.nist.gov
18
cve-2014-2915
xen
arm
denial of service
nvd
hardware features
cache control
coprocessors
debug registers

6.6 Medium

AI Score

Confidence

High

5.5 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

24.8%

Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of service (host or guest crash) via unspecified vectors, related to (1) cache control, (2) coprocessors, (3) debug registers, and (4) other unspecified registers.

CPENameOperatorVersion
xen:xenxeneq4.4.0

6.6 Medium

AI Score

Confidence

High

5.5 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

24.8%