CVE-2014-1894

Published: Apr 1, 2014Modified: May 6, 2026

5.2

Vector

AV:A/AC:M/Au:S/C:N/I:N/A:C

Exploitability: 4.4 / Impact: 6.9

Source: NVD

Description

Multiple integer overflows in unspecified suboperations in the flask hypercall in Xen 3.2.x and earlier, when XSM is enabled, allow local users to cause a denial of service (processor fault) via unspecified vectors, a different vulnerability than CVE-2014-1891, CVE-2014-1892, and CVE-2014-1893.

Affected (9)

Products: Xen: Xen

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Up to 3.2.3
Xen Xen	Version 3.0.2
Xen Xen	Version 3.0.3
Xen Xen	Version 3.0.4
Xen Xen	Version 3.1.3
Xen Xen	Version 3.1.4
Xen Xen	Version 3.2.0
Xen Xen	Version 3.2.1
Xen Xen	Version 3.2.2

Related CWEs

References (16)

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-201407-03.xml

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/02/07/12

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/02/07/4

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/02/10/8

Source: cve@mitre.org

http://xenbits.xen.org/xsa/advisory-84.html

Source: cve@mitre.org

PatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201407-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/02/07/12

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/02/07/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/02/10/8

Source: af854a3a-2127-422b-91ae-364da2661108

http://xenbits.xen.org/xsa/advisory-84.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.