CVE-2014-8866
published 2014-12-01CVE-2014-8866: The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on a 64-bit hypervisor, allows local 32-bit HVM guests to cause…
PriorityP412medium4.7CVSS 2.0
AVLACMAuNCNINAC
EPSS
0.43%
35.0th percentile
The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on a 64-bit hypervisor, allows local 32-bit HVM guests to cause a denial of service (host crash) via vectors involving altering the high halves of registers while in 64-bit mode.
Affected
35 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | xen | < xen 4.4.1-5 (bookworm) | xen 4.4.1-5 (bookworm) |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
CVSS provenance
nvdv2.04.7MEDIUMAV:L/AC:M/Au:N/C:N/I:N/A:C
osv4.7MEDIUM
vendor_debian4.7MEDIUM
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gqm4-jx6m-62vq: The compatibility mode hypercall argument translation in Xen 3
ghsa_unreviewed·2022-05-14
CVE-2014-8866 [MEDIUM] GHSA-gqm4-jx6m-62vq: The compatibility mode hypercall argument translation in Xen 3
The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on a 64-bit hypervisor, allows local 32-bit HVM guests to cause a denial of service (host crash) via vectors involving altering the high halves of registers while in 64-bit mode.
OSV
CVE-2014-8866: The compatibility mode hypercall argument translation in Xen 3
osv·2014-12-01·CVSS 4.7
CVE-2014-8866 [MEDIUM] CVE-2014-8866: The compatibility mode hypercall argument translation in Xen 3
The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on a 64-bit hypervisor, allows local 32-bit HVM guests to cause a denial of service (host crash) via vectors involving altering the high halves of registers while in 64-bit mode.
Red Hat
xen: Excessive checking in compatibility mode hypercall argument translation (xsa111)
vendor_redhat·2014-11-27·CVSS 4.7
CVE-2014-8866 [MEDIUM] xen: Excessive checking in compatibility mode hypercall argument translation (xsa111)
xen: Excessive checking in compatibility mode hypercall argument translation (xsa111)
The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on a 64-bit hypervisor, allows local 32-bit HVM guests to cause a denial of service (host crash) via vectors involving altering the high halves of registers while in 64-bit mode.
Statement: Not vulnerable.
This issue did not affect the versions of the kernel-xen package as shipped with Red Hat Enterprise Linux 5.
Package: kernel-xen (Red Hat Enterprise Linux 5) - Not affected
Debian
CVE-2014-8866: xen - The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x...
vendor_debian·2014·CVSS 4.7
CVE-2014-8866 [MEDIUM] CVE-2014-8866: xen - The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x...
The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on a 64-bit hypervisor, allows local 32-bit HVM guests to cause a denial of service (host crash) via vectors involving altering the high halves of registers while in 64-bit mode.
Scope: local
bookworm: resolved (fixed in 4.4.1-5)
bullseye: resolved (fixed in 4.4.1-5)
forky: resolved (fixed in 4.4.1-5)
sid: resolved (fixed in 4.4.1-5)
trixie: resolved (fixed in 4.4.1-5)
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.htmlhttp://secunia.com/advisories/59937http://secunia.com/advisories/62672http://support.citrix.com/article/CTX200288http://support.citrix.com/article/CTX201794http://www.debian.org/security/2015/dsa-3140http://www.securityfocus.com/bid/71332http://xenbits.xen.org/xsa/advisory-111.htmlhttps://security.gentoo.org/glsa/201504-04http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.htmlhttp://secunia.com/advisories/59937http://secunia.com/advisories/62672http://support.citrix.com/article/CTX200288http://support.citrix.com/article/CTX201794http://www.debian.org/security/2015/dsa-3140http://www.securityfocus.com/bid/71332http://xenbits.xen.org/xsa/advisory-111.htmlhttps://security.gentoo.org/glsa/201504-04
2014-12-01
Published