CVE-2014-3125

Published: May 2, 2014Modified: May 6, 2026

6.2

Vector

AV:A/AC:L/Au:S/C:N/I:P/A:C

Exploitability: 5.1 / Impact: 7.8

Source: NVD

Description

Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTL_EL1 register, which allows local guest users to modify the hardware timers and cause a denial of service (crash) via unspecified vectors.

Affected (2)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 4.4.0
Xen Xen	Version 4.4.0 rc1

Related CWEs

CWE-264

References (12)

http://secunia.com/advisories/58347

Source: cve@mitre.org

Vendor Advisory

http://www.openwall.com/lists/oss-security/2014/04/30/11

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/04/30/5

Source: cve@mitre.org

http://www.securityfocus.com/bid/67157

Source: cve@mitre.org

http://www.securitytracker.com/id/1030184

Source: cve@mitre.org

http://xenbits.xen.org/xsa/advisory-91.html

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/58347