CVE-2014-8867

Published: Dec 1, 2014Modified: May 6, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The acceleration support for the "REP MOVS" instruction in Xen 4.4.x, 3.2.x, and earlier lacks properly bounds checking for memory mapped I/O (MMIO) emulated in the hypervisor, which allows local HVM guests to cause a denial of service (host crash) via unspecified vectors.

Affected (11)

Products: Redhat: Enterprise Linux, Enterprise Linux Desktop · Xen: Xen · Debian: Debian Linux · +1 more

Show all products

Redhat: Enterprise Linux, Enterprise Linux Desktop · Xen: Xen · Debian: Debian Linux · Opensuse: Opensuse

2 products

Enterprise Linux

Enterprise Linux Desktop

1 product

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux Desktop	Version 5.0

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Up to 3.2.0
Xen Xen	Version 3.2.1
Xen Xen	Version 3.2.2
Xen Xen	Version 3.2.3
Xen Xen	Version 4.4.0
Xen Xen	Version 4.4.1

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Related CWEs

References (24)

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0783.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/59949

Source: cve@mitre.org

Permissions RequiredThird Party Advisory

http://secunia.com/advisories/62672

Source: cve@mitre.org

Permissions RequiredThird Party Advisory

http://support.citrix.com/article/CTX200288

Source: cve@mitre.org

http://support.citrix.com/article/CTX201794

Source: cve@mitre.org

http://www.debian.org/security/2015/dsa-3140

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/bid/71331

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://xenbits.xenproject.org/xsa/advisory-112.html

Source: cve@mitre.org

PatchVendor Advisory

https://security.gentoo.org/glsa/201504-04

Source: cve@mitre.org

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0783.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/59949

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party Advisory

http://secunia.com/advisories/62672

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party Advisory

http://support.citrix.com/article/CTX200288

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.citrix.com/article/CTX201794

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2015/dsa-3140

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/bid/71331

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://xenbits.xenproject.org/xsa/advisory-112.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://security.gentoo.org/glsa/201504-04

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.