CVE-2014-3714

The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit ARM guest kernel in an image, which triggers a buffer overflow.
References
Link Resource
http://www.openwall.com/lists/oss-security/2014/05/15/6 Mailing List Third Party Advisory
http://xenbits.xen.org/xsa/advisory-95.html Patch Vendor Advisory
http://www.openwall.com/lists/oss-security/2014/05/14/4 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/05/16/1 Mailing List Third Party Advisory
http://www.securitytracker.com/id/1030252 Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*

Information

Published : 2014-05-19 07:55

Updated : 2018-10-30 09:26


NVD link : CVE-2014-3714

Mitre link : CVE-2014-3714


JSON object : View

CWE
CWE-20

Improper Input Validation

Advertisement

dedicated server usa

Products Affected

xen

  • xen