CVE-2014-3717

Published: May 19, 2014Modified: May 6, 2026

3.3

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:P

Exploitability: 3.4 / Impact: 4.9

Source: NVD

Description

Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a denial of service (crash) via a crafted kernel, which triggers a buffer overflow.

Affected (2)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 4.4.0
Xen Xen	Version 4.4.0 rc1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://www.openwall.com/lists/oss-security/2014/05/14/4

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/05/15/6

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/05/16/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.securitytracker.com/id/1030252

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://xenbits.xen.org/xsa/advisory-95.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.openwall.com/lists/oss-security/2014/05/14/4

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/05/15/6

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/05/16/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.securitytracker.com/id/1030252

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://xenbits.xen.org/xsa/advisory-95.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.