Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2014-3716
HistoryMay 19, 2014 - 2:55 p.m.

CVE-2014-3716

2014-05-1914:55:12
Debian Security Bug Tracker
security-tracker.debian.org
8

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

EPSS

0

Percentile

5.1%

Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspecified field in a DTB header in a 32-bit guest kernel.

OSVersionArchitecturePackageVersionFilename
Debian12allxen< 4.17.3+10-g091466ba55-1~deb12u1xen_4.17.3+10-g091466ba55-1~deb12u1_all.deb
Debian11allxen< 4.14.6-1xen_4.14.6-1_all.deb
Debian999allxen< 4.17.3+36-g54dacb5c02-1xen_4.17.3+36-g54dacb5c02-1_all.deb
Debian13allxen< 4.17.3+36-g54dacb5c02-1xen_4.17.3+36-g54dacb5c02-1_all.deb

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

EPSS

0

Percentile

5.1%