CVE-2014-9066

Published: Dec 9, 2014Modified: May 6, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

Xen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and write locks, which allows local x86 guest users to cause a denial of service (write denial or NMI watchdog timeout and host crash) via a large number of read requests, a different vulnerability than CVE-2014-9065.

Affected (3)

Products: Xen: Xen · Opensuse: Opensuse

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Up to 4.4.1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Related CWEs

References (12)

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2014/12/08/4

Source: cve@mitre.org

http://www.securityfocus.com/bid/71546

Source: cve@mitre.org

http://xenbits.xen.org/xsa/advisory-114.html

Source: cve@mitre.org

PatchVendor Advisory

https://security.gentoo.org/glsa/201504-04

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2014/12/08/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/71546

Source: af854a3a-2127-422b-91ae-364da2661108

http://xenbits.xen.org/xsa/advisory-114.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://security.gentoo.org/glsa/201504-04

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.