CVE-2014-1895

Published: Apr 1, 2014Modified: May 6, 2026

5.8

Vector

AV:A/AC:M/Au:S/C:P/I:N/A:C

Exploitability: 4.4 / Impact: 7.8

Source: NVD

Description

Off-by-one error in the flask_security_avc_cachestats function in xsm/flask/flask_op.c in Xen 4.2.x and 4.3.x, when the maximum number of physical CPUs are in use, allows local users to cause a denial of service (host crash) or obtain sensitive information from hypervisor memory by leveraging a FLASK_AVC_CACHESTAT hypercall, which triggers a buffer over-read.

Affected (6)

Products: Xen: Xen

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 4.2.0
Xen Xen	Version 4.2.1
Xen Xen	Version 4.2.2
Xen Xen	Version 4.2.3
Xen Xen	Version 4.3.0
Xen Xen	Version 4.3.1

Related CWEs

References (10)

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-201407-03.xml

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/02/07/12

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/02/10/6

Source: cve@mitre.org

http://xenbits.xen.org/xsa/advisory-85.html

Source: cve@mitre.org

PatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201407-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/02/07/12

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/02/10/6

Source: af854a3a-2127-422b-91ae-364da2661108

http://xenbits.xen.org/xsa/advisory-85.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.