CVE

Id
70420  
CVE No.
CVE-2014-3125  
Status
Candidate  
Description
Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTL_EL1 register, which allows local guest users to modify the hardware timers and cause a denial of service (crash) via unspecified vectors.  
Phase
Assigned (20140429)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
669898 70420 CVE-2014-3125 MLIST:[oss-security] 20140430 Re: Xen Security Advisory 91 - Hardware timer context is not properly context switched on ARM  View
669899 70420 CVE-2014-3125 URL:http://www.openwall.com/lists/oss-security/2014/04/30/11  View
669900 70420 CVE-2014-3125 MLIST:[oss-security] 20140430 Xen Security Advisory 91 - Hardware timer context is not properly context switched on ARM  View
669901 70420 CVE-2014-3125 URL:http://www.openwall.com/lists/oss-security/2014/04/30/5  View
669902 70420 CVE-2014-3125 CONFIRM:http://xenbits.xen.org/xsa/advisory-91.html  View
669903 70420 CVE-2014-3125 BID:67157  View
669904 70420 CVE-2014-3125 URL:http://www.securityfocus.com/bid/67157  View
669905 70420 CVE-2014-3125 SECTRACK:1030184  View
669906 70420 CVE-2014-3125 URL:http://www.securitytracker.com/id/1030184  View
669907 70420 CVE-2014-3125 SECUNIA:58347  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13463 JVNDB-2014-002338 SAP Netweaver Java Application Server における SLD に登録されている SAP システムのリストを取得される脆弱性 SAP Netweaver Java Application Server は、アクセスを適切に制限しないため、SLD に登録されている SAP システムのリストを取得される脆弱性が存在します。 CVE-2014-3133 70420 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002338.html  View