NVD

Id
32906  
Name
CVE-2014-5146  
Description
Certain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when using Hardware Assisted Paging (HAP), are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5149.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-08-22  
Modified Date
2017-01-06  
Seq
2014-5146  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172810 32906 CVE-2014-5146 FEDORA-2014-9472  View
172811 32906 CVE-2014-5146 FEDORA-2014-9493  View
172812 32906 CVE-2014-5146 openSUSE-SU-2015:0226  View
172813 32906 CVE-2014-5146 openSUSE-SU-2015:0256  View
172814 32906 CVE-2014-5146 69198  View
172815 32906 CVE-2014-5146 1030723  View
172816 32906 CVE-2014-5146 http://xenbits.xen.org/xsa/advisory-97.html  View
172817 32906 CVE-2014-5146 xen-cve20145146-dos(95234)  View
172818 32906 CVE-2014-5146 GLSA-201504-04  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15038 JVNDB-2014-003913 Xen の特定の MMU 仮想化操作におけるサービス運用妨害 (DoS) の脆弱性 Xen の特定の MMU 仮想化操作は、Hardware Assisted Paging (HAP) を使用する場合、プリエンプティブでないため、サービス運用妨害 (vcpu 資源の消費) 状態にされる脆弱性が存在します。 CVE-2014-5146 72435 CVE-2014-5146 32906 4.7 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003913.html 2014-08-12 2014-08-26 View