CVE-2014-3716 — Improper Input Validation in XEN

CWE-20 — Improper Input Validation5 documents5 sources
Severity
1.9LOWNVD
EPSS
0.1%
top 64.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
XENDebian XEN
Timeline
PublishedMay 19
Latest updateMay 14

Description

Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspecified field in a DTB header in a 32-bit guest kernel.

CVSS vector

AV:L/AC:M/C:N/I:N/A:PExploitability: 3.4 | Impact: 2.9

Affected Packages3 packages

▶Ubuntuxen/xen< 4.4.0-0ubuntu5.1
▶NVDxen/xen4.4.0
▶debiandebian/xen

Patches

Patch: xenbits.xen.org ↗Patch: xenbits.xen.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-cjr8-5qvf-7w96: Xen 4↗2022-05-14
▶
OSV
CVE-2014-3716: Xen 4↗2014-05-19
▶

📋Vendor Advisories

2
Debian
CVE-2014-3716: xen - Xen 4.4.x does not properly check alignment, which allows local users to cause a...↗2014
▶
Red Hat
CVE-2014-3716: Xen 4↗
▶