NVD

Id
30434  
Name
CVE-2014-1896  
Description
The (1) do_send and (2) do_recv functions in io.c in libvchan in Xen 4.2.x, 4.3.x, and 4.4-RC series allows local guests to cause a denial of service or possibly gain privileges via crafted xenstore ring indexes, which triggers a "read or write past the end of the ring."  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-04-01  
Modified Date
2017-01-06  
Seq
2014-1896  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161031 30434 CVE-2014-1896 SUSE-SU-2014:0373  View
161032 30434 CVE-2014-1896 GLSA-201407-03  View
161033 30434 CVE-2014-1896 [oss-security] 20140207 Re: Xen Security Advisory 84 - integer overflow in several XSM/Flask hypercalls  View
161034 30434 CVE-2014-1896 [oss-security] 20140210 Xen Security Advisory 86 (CVE-2014-1896) - libvchan failure handling malicious ring indexes  View
161035 30434 CVE-2014-1896 http://xenbits.xen.org/xsa/advisory-86.html  View
161036 30434 CVE-2014-1896 http://xenbits.xen.org/xsa/xsa86.patch  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13014 JVNDB-2014-001889 Xen の libvchan の io.c におけるサービス運用妨害 (DoS) の脆弱性 Xen の libvchan の io.c 内の (1) do_send および (2) do_recv 関数には、サービス運用妨害 (DoS) 状態にされる、または権限を取得される脆弱性が存在します。 CVE-2014-1896 69183 CVE-2014-1896 30434 4.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001889.html 2014-02-06 2014-04-03 View