Lucene search
HistoryMay 19, 2014 - 2:55 p.m.
CVE-2014-3717
xen
cve-2014-3717
arm
validation vulnerability
buffer overflow
6.6 Medium
AI Score
Confidence
High
3.3 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:N/A:P
0.0004 Low
EPSS
Percentile
5.2%
Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a denial of service (crash) via a crafted kernel, which triggers a buffer overflow.
Related
cvelist
cvelist
CVE-2014-3717
2014-05-19 14:00:00
ubuntucve
ubuntucve
CVE-2014-3717
2014-05-19 00:00:00
redhatcve
redhatcve
CVE-2014-3717
2015-10-30 10:34:31
prion
prion
Buffer overflow
2014-05-19 14:55:00
debiancve
debiancve
CVE-2014-3717
2014-05-19 14:55:00
securityvulns
securityvulns
Xen buffer overflow
2014-05-15 00:00:00
xen
xen
input handling vulnerabilities loading guest kernel on ARM
2014-05-14 10:44:00
6.6 Medium
AI Score
Confidence
High
3.3 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:N/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2014-3717