Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-9066
HistoryDec 09, 2014 - 12:00 a.m.

CVE-2014-9066

2014-12-0900:00:00
ubuntu.com
ubuntu.com
8

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

25.9%

Xen 4.4.x and earlier, when using a large number of VCPUs, does not
properly handle read and write locks, which allows local x86 guest users to
cause a denial of service (write denial or NMI watchdog timeout and host
crash) via a large number of read requests, a different vulnerability than
CVE-2014-9065.

Notes

Author Note
mdeslaur doesn’t affect 4.1
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchxen< 4.4.1-0ubuntu0.14.04.4UNKNOWN
ubuntu14.10noarchxen< 4.4.1-0ubuntu0.14.10.4UNKNOWN

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

25.9%