CVE

Id
70419  
CVE No.
CVE-2014-3124  
Status
Candidate  
Description
The HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to cause a denial of service (hypervisor crash) or possibly execute arbitrary code by leveraging a separate qemu-dm vulnerability to trigger invalid page table translations for unspecified memory page types.  
Phase
Assigned (20140429)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
669880 70419 CVE-2014-3124 MLIST:[oss-security] 20140429 Xen Security Advisory 92 - HVMOP_set_mem_type allows invalid P2M entries to be created  View
669881 70419 CVE-2014-3124 URL:http://www.openwall.com/lists/oss-security/2014/04/29/1  View
669882 70419 CVE-2014-3124 MLIST:[oss-security] 20140430 Re: Xen Security Advisory 92 - HVMOP_set_mem_type allows invalid P2M entries to be created  View
669883 70419 CVE-2014-3124 URL:http://www.openwall.com/lists/oss-security/2014/04/30/10  View
669884 70419 CVE-2014-3124 CONFIRM:http://xenbits.xen.org/xsa/advisory-92.html  View
669885 70419 CVE-2014-3124 DEBIAN:DSA-3006  View
669886 70419 CVE-2014-3124 URL:http://www.debian.org/security/2014/dsa-3006  View
669887 70419 CVE-2014-3124 FEDORA:FEDORA-2014-5915  View
669888 70419 CVE-2014-3124 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133148.html  View
669889 70419 CVE-2014-3124 FEDORA:FEDORA-2014-5941  View
669890 70419 CVE-2014-3124 URL:http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133191.html  View
669891 70419 CVE-2014-3124 GENTOO:GLSA-201407-03  View
669892 70419 CVE-2014-3124 URL:http://security.gentoo.org/glsa/glsa-201407-03.xml  View
669893 70419 CVE-2014-3124 SUSE:openSUSE-SU-2014:1281  View
669894 70419 CVE-2014-3124 URL:http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html  View
669895 70419 CVE-2014-3124 BID:67113  View
669896 70419 CVE-2014-3124 URL:http://www.securityfocus.com/bid/67113  View
669897 70419 CVE-2014-3124 SECTRACK:1030160  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13462 JVNDB-2014-002337 SAP Background Processing における重要な情報を取得される脆弱性 SAP Background Processing は、アクセスを適切に制限しないため、重要な情報を取得される脆弱性が存在します。 CVE-2014-3132 70419 4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002337.html  View