NVD

Id
34608  
Name
CVE-2014-7155  
Description
The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a denial of service (guest crash) or gain guest kernel mode privileges via vectors involving an (1) HLT, (2) LGDT, (3) LIDT, or (4) LMSW instruction.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-02  
Modified Date
2017-01-02  
Seq
2014-7155  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
178168 34608 CVE-2014-7155 FEDORA-2014-12036  View
178169 34608 CVE-2014-7155 FEDORA-2014-12000  View
178170 34608 CVE-2014-7155 openSUSE-SU-2014:1279  View
178171 34608 CVE-2014-7155 openSUSE-SU-2014:1281  View
178172 34608 CVE-2014-7155 61890  View
178173 34608 CVE-2014-7155 GLSA-201412-42  View
178174 34608 CVE-2014-7155 http://support.citrix.com/article/CTX200218  View
178175 34608 CVE-2014-7155 DSA-3041  View
178176 34608 CVE-2014-7155 70057  View
178177 34608 CVE-2014-7155 1030888  View
178178 34608 CVE-2014-7155 http://xenbits.xen.org/xsa/advisory-105.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15639 JVNDB-2014-004514 Xen の arch/x86/x86_emulate/x86_emulate.c の x86_emulate におけるサービス運用妨害 (DoS) の脆弱性 Xen の arch/x86/x86_emulate/x86_emulate.c の x86_emulate は、supervisor モード権限を適切にチェックしないため、サービス運用妨害 (ゲストクラッシュ) 状態にされる、またはゲストカーネルモード権限を取得される脆弱性が存在します。 CVE-2014-7155 74447 CVE-2014-7155 34608 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004514.html 2014-09-23 2014-11-12 View