NVD

Id
35602  
Name
CVE-2014-8594  
Description
The do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of service (NULL pointer dereference) by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging (HAP).  
Reject
 
CVSS Version
2  
CVSS Score
5.4  
Severity
Medium  
CVSS Base Score
5.4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-11-19  
Modified Date
2017-01-06  
Seq
2014-8594  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182255 35602 CVE-2014-8594 openSUSE-SU-2015:0226  View
182256 35602 CVE-2014-8594 openSUSE-SU-2015:0256  View
182257 35602 CVE-2014-8594 DSA-3140  View
182258 35602 CVE-2014-8594 71149  View
182259 35602 CVE-2014-8594 http://xenbits.xen.org/xsa/advisory-109.html  View
182260 35602 CVE-2014-8594 xen-cve20148594-sec-byass(98767)  View
182261 35602 CVE-2014-8594 GLSA-201504-04  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16674 JVNDB-2014-005549 Xen におけるサービス運用妨害 (DoS) の脆弱性 Xen は、PV ページテーブルのみ更新を適切に制限しないため、サービス運用妨害 (NULL ポインタデリファレンス) 状態にされる脆弱性が存在します。 CVE-2014-8594 75887 CVE-2014-8594 35602 5.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005549.html 2014-11-18 2014-11-20 View