Lucene search

PRIOn knowledge basePRION:CVE-2014-8866

HistoryDec 01, 2014 - 3:59 p.m.

Code injection

2014-12-0115:59:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

JSON

The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on a 64-bit hypervisor, allows local 32-bit HVM guests to cause a denial of service (host crash) via vectors involving altering the high halves of registers while in 64-bit mode.

CPENameOperatorVersion
debian_linuxeq7.0
opensuseeq13.1
opensuseeq13.2
xeneq4.1.5
xeneq4.2.2
xeneq4.2.3
xeneq3.4.0
xeneq4.3.0
xeneq4.0.4
xeneq4.0.2

Name	Operator	Version
debian_linux	eq	7.0
opensuse	eq	13.1
opensuse	eq	13.2
xen	eq	4.1.5
xen	eq	4.2.2
xen	eq	4.2.3
xen	eq	3.4.0
xen	eq	4.3.0
xen	eq	4.0.4
xen	eq	4.0.2

Rows per page:

1-10 of 311

References

lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html

lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html

secunia.com/advisories/59937

secunia.com/advisories/62672

support.citrix.com/article/CTX200288

support.citrix.com/article/CTX201794

www.debian.org/security/2015/dsa-3140

www.securityfocus.com/bid/71332

xenbits.xen.org/xsa/advisory-111.html

security.gentoo.org/glsa/201504-04