Lucene search

K
nvd[email protected]NVD:CVE-2014-9066
HistoryDec 09, 2014 - 11:59 p.m.

CVE-2014-9066

2014-12-0923:59:09
CWE-17
web.nvd.nist.gov

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

Xen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and write locks, which allows local x86 guest users to cause a denial of service (write denial or NMI watchdog timeout and host crash) via a large number of read requests, a different vulnerability than CVE-2014-9065.

Affected configurations

NVD
Node
xenxenRange4.4.1
Node
opensuseopensuseMatch13.1
OR
opensuseopensuseMatch13.2

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%