Lucene search
HistoryMay 19, 2014 - 2:55 p.m.
CVE-2014-3714
cve-2014-3714
xen 4.4.x
arm
image loading
buffer overflow
denial of service
6.5 Medium
AI Score
Confidence
High
3.3 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:N/A:P
0.0004 Low
EPSS
Percentile
5.2%
The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit ARM guest kernel in an image, which triggers a buffer overflow.
Related
ubuntucve
ubuntucve
CVE-2014-3714
2014-05-19 00:00:00
prion
prion
Buffer overflow
2014-05-19 14:55:00
cvelist
cvelist
CVE-2014-3714
2014-05-19 14:00:00
redhatcve
redhatcve
CVE-2014-3714
2015-10-30 10:34:26
debiancve
debiancve
CVE-2014-3714
2014-05-19 14:55:00
securityvulns
securityvulns
Xen buffer overflow
2014-05-15 00:00:00
xen
xen
input handling vulnerabilities loading guest kernel on ARM
2014-05-14 10:44:00
6.5 Medium
AI Score
Confidence
High
3.3 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:N/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2014-3714