input handling vulnerabilities loading guest kernel on ARM

ISSUE DESCRIPTION When loading a 32-bit ARM guest kernel the Xen tools did not correctly validate the length of the kernel against the actual image size. This would then lead to an overrun on the input buffer when loading the kernel into guest RAM CVE-2014-3714. Furthermore when checking a 32-bit...

CVE-2014-3125

Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTLEL1 register, which allows local guest users to modify the hardware timers and cause a denial of service crash via unspecified vectors...

CVE-2014-3125

Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTLEL1 register, which allows local guest users to modify the hardware timers and cause a denial of service crash via unspecified vectors...

Design/Logic Flaw

Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTLEL1 register, which allows local guest users to modify the hardware timers and cause a denial of service crash via unspecified vectors...

UBUNTU-CVE-2014-3125

Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTLEL1 register, which allows local guest users to modify the hardware timers and cause a denial of service crash via unspecified vectors...

CVE-2014-3125

CVE-2014-3125 concerns Xen 4.4.x on ARM where CNTKCTL_EL1 register is not properly context switched. This allows a local guest to modify hardware timers and, per the XSA-91 advisory, may enable a guest kernel to reconfigure timer interrupts for the entire system, potentially causing a denial of s...

CVE-2014-3125

Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTLEL1 register, which allows local guest users to modify the hardware timers and cause a denial of service crash via unspecified vectors...

CVE-2014-3125

Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTLEL1 register, which allows local guest users to modify the hardware timers and cause a denial of service crash via unspecified vectors...

Fedora 20 : qemu-1.6.2-4.fc20 (2014-5825)

Fix arm sd warnings with latest kernel bz 1091548 - Fix regression in CVE backport that affects openstack thanks lbezdick - Fix guest startup crashes from autotest bz 1081610 - Block/image format validation CVE-2014-0142 - 2014-0148 bz 1078201, bz 1086710, bz 1079140, bz 1086724, bz 1079240, bz...

Hardware timer context is not properly context switched on ARM

ISSUE DESCRIPTION When running on an ARM platform Xen was not context switching the CNTKCTLEL1 register, which is used by the guest kernel to control access by userspace processes to the hardware timers. This meant that any guest can reconfigure these settings for the entire system. IMPACT A...

CVE-2014-2986

The vgicdistrmmiowrite function in the virtual guest interrupt controller GIC distributor arch/arm/vgic.c in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service NULL pointer dereference and host crash via unspecified vectors...

Null pointer dereference

The vgicdistrmmiowrite function in the virtual guest interrupt controller GIC distributor arch/arm/vgic.c in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service NULL pointer dereference and host crash via unspecified vectors...

UBUNTU-CVE-2014-2986

The vgicdistrmmiowrite function in the virtual guest interrupt controller GIC distributor arch/arm/vgic.c in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service NULL pointer dereference and host crash via unspecified vectors...

CVE-2014-2986

The vgicdistrmmiowrite function in the virtual guest interrupt controller GIC distributor arch/arm/vgic.c in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service NULL pointer dereference and host crash via unspecified vectors...

CVE-2014-2986

The vgicdistrmmiowrite function in the virtual guest interrupt controller GIC distributor arch/arm/vgic.c in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service NULL pointer dereference and host crash via unspecified vectors...

CVE-2014-2986

The vgicdistrmmiowrite function in the virtual guest interrupt controller GIC distributor arch/arm/vgic.c in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service NULL pointer dereference and host crash via unspecified vectors...

CVE-2014-2986

The CVE-2014-2986 issue affects Xen 4.4.x running on ARM, where the vgic_distr_mmio_write function in the GIC distributor (arch/arm/vgic.c) can dereference an invalid pointer via unspecified vectors, enabling a local guest to trigger a denial of service and host crash. Multiple sources (including...

Hacking exposed MicroSD card vulnerability: execute arbitrary code-a vulnerability warning-the black bar safety net

In the last week held the chaos computer conference, well-known hardware hacker Huang Xin countryAndrew bunnie Huangreported the MicroSD card to the security risks. He and his colleagues found that some SD cards contain a be allowed on the card to execute arbitrary code the vulnerability, and in...

CVE-2014-2915

Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of service host or guest crash via unspecified vectors, related to 1 cache control, 2 coprocessors, 3 debug registers, and 4 other unspecified registers...

Design/Logic Flaw

Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of service host or guest crash via unspecified vectors, related to 1 cache control, 2 coprocessors, 3 debug registers, and 4 other unspecified registers...