Lucene search

K
cvelistMitreCVELIST:CVE-2014-1950
HistoryFeb 14, 2014 - 3:00 p.m.

CVE-2014-1950

2014-02-1415:00:00
mitre
www.cve.org
1

3.7 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded toolstack, does not properly handle a failure by the xc_cpumap_alloc function, which allows local users with access to management functions to cause a denial of service (heap corruption) and possibly gain privileges via unspecified vectors.

3.7 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%