PRIOn knowledge basePRION:CVE-2014-8594

HistoryNov 19, 2014 - 6:59 p.m.

Null pointer dereference

2014-11-1918:59:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.5%

JSON

The do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of service (NULL pointer dereference) by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging (HAP).

CPENameOperatorVersion
debian_linuxeq7.0
opensuseeq13.1
opensuseeq13.2
xeneq4.1.5
xeneq4.2.2
xeneq4.2.3
xeneq4.3.0
xeneq4.0.4
xeneq4.0.2
xeneq4.1.2

Name	Operator	Version
debian_linux	eq	7.0
opensuse	eq	13.1
opensuse	eq	13.2
xen	eq	4.1.5
xen	eq	4.2.2
xen	eq	4.2.3
xen	eq	4.3.0
xen	eq	4.0.4
xen	eq	4.0.2
xen	eq	4.1.2

Rows per page:

1-10 of 211

References

lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html

lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html

secunia.com/advisories/62672

www.debian.org/security/2015/dsa-3140

www.securityfocus.com/bid/71149

xenbits.xen.org/xsa/advisory-109.html

exchange.xforce.ibmcloud.com/vulnerabilities/98767

security.gentoo.org/glsa/201504-04