CVE-2014-3715 — Improper Restriction of Operations within the Bounds of a Memory Buffer in XEN

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents5 sources
Severity
3.3LOWNVD
EPSS
0.2%
top 60.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
XENDebian XEN
Timeline
PublishedMay 19
Latest updateMay 14

Description

Buffer overflow in Xen 4.4.x allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit guest kernel, related to searching for an appended DTB.

CVSS vector

AV:L/AC:M/C:P/I:N/A:PExploitability: 3.4 | Impact: 4.9

Affected Packages3 packages

▶Ubuntuxen/xen< 4.4.0-0ubuntu5.1
▶NVDxen/xen4.4.0
▶debiandebian/xen

Patches

Patch: xenbits.xen.org ↗Patch: xenbits.xen.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-r3x9-p8f8-2fmg: Buffer overflow in Xen 4↗2022-05-14
▶
OSV
CVE-2014-3715: Buffer overflow in Xen 4↗2014-05-19
▶

📋Vendor Advisories

2
Debian
CVE-2014-3715: xen - Buffer overflow in Xen 4.4.x allows local users to read system memory or cause a...↗2014
▶
Red Hat
CVE-2014-3715: Buffer overflow in Xen 4↗
▶