CVEvulnerability

CVE-2014-3968

5.5 MEDIUM Published 2014-06-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-06-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.5 MEDIUM — AV:A/AC:L/Au:S/C:N/I:N/A:C

Description

The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x allows local guest HVM administrators to cause a denial of service (host crash) via a large number of crafted requests, which trigger an error messages to be logged.

Affected configurations

• xen xen 4.3.0 • xen xen 4.3.1 • xen xen 4.2.0 • xen xen 4.2.1 • xen xen 4.2.2 • xen xen 4.2.3 • opensuse opensuse 12.3 • opensuse opensuse 13.1 • xen xen 4.4.0

References