CVE

Id
69245  
CVE No.
CVE-2014-1950  
Status
Candidate  
Description
Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded toolstack, does not properly handle a failure by the xc_cpumap_alloc function, which allows local users with access to management functions to cause a denial of service (heap corruption) and possibly gain privileges via unspecified vectors.  
Phase
Assigned (20140212)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
664940 69245 CVE-2014-1950 MLIST:[oss-security] 20140212 Xen Security Advisory 88 (CVE-2014-1950) - use-after-free in xc_cpupool_getinfo() under memory pressure  View
664941 69245 CVE-2014-1950 URL:http://www.openwall.com/lists/oss-security/2014/02/12/17  View
664942 69245 CVE-2014-1950 CONFIRM:http://xenbits.xen.org/xsa/advisory-88.html  View
664943 69245 CVE-2014-1950 DEBIAN:DSA-3006  View
664944 69245 CVE-2014-1950 URL:http://www.debian.org/security/2014/dsa-3006  View
664945 69245 CVE-2014-1950 SUSE:SUSE-SU-2014:0372  View
664946 69245 CVE-2014-1950 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html  View
664947 69245 CVE-2014-1950 SUSE:SUSE-SU-2014:0373  View

Related JVN