CVE

Id
69875  
CVE No.
CVE-2014-2580  
Status
Candidate  
Description
The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service ("scheduling while atomic" error and host crash) via a malformed packet, which causes a mutex to be taken when trying to disable the interface.  
Phase
Assigned (20140321)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
667456 69875 CVE-2014-2580 MLIST:[oss-security] 20140324 Re: Xen Security Advisory 90 - Linux netback crash trying to disable due to malformed packet  View
667457 69875 CVE-2014-2580 URL:http://www.openwall.com/lists/oss-security/2014/03/24/8  View
667458 69875 CVE-2014-2580 MLIST:[oss-security] 20140324 Xen Security Advisory 90 - Linux netback crash trying to disable due to malformed packet  View
667459 69875 CVE-2014-2580 URL:http://www.openwall.com/lists/oss-security/2014/03/24/6  View
667460 69875 CVE-2014-2580 CONFIRM:http://xenbits.xen.org/xsa/advisory-90.html  View
667461 69875 CVE-2014-2580 BID:66386  View
667462 69875 CVE-2014-2580 URL:http://www.securityfocus.com/bid/66386  View
667463 69875 CVE-2014-2580 SECTRACK:1029949  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
12900 JVNDB-2014-001775 McAfee Asset Manager の servlet/downloadReport におけるディレクトリトラバーサルの脆弱性 McAfee Asset Manager の servlet/downloadReport には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-2588 69875 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001775.html  View