5.8

CVE-2014-7155

The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a denial of service (guest crash) or gain guest kernel mode privileges via vectors involving an (1) HLT, (2) LGDT, (3) LIDT, or (4) LMSW instruction.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xen ≫ Xen Version <= 4.4.0
Xen ≫ Xen Version 3.0.2
Xen ≫ Xen Version 3.0.3
Xen ≫ Xen Version 3.0.4
Xen ≫ Xen Version 3.1.3
Xen ≫ Xen Version 3.1.4
Xen ≫ Xen Version 3.2.0
Xen ≫ Xen Version 3.2.1
Xen ≫ Xen Version 3.2.2
Xen ≫ Xen Version 3.2.3
Xen ≫ Xen Version 3.3.0
Xen ≫ Xen Version 3.3.1
Xen ≫ Xen Version 3.3.2
Xen ≫ Xen Version 3.4.0
Xen ≫ Xen Version 3.4.1
Xen ≫ Xen Version 3.4.2
Xen ≫ Xen Version 3.4.3
Xen ≫ Xen Version 3.4.4
Xen ≫ Xen Version 4.0.0
Xen ≫ Xen Version 4.0.1
Xen ≫ Xen Version 4.0.2
Xen ≫ Xen Version 4.0.3
Xen ≫ Xen Version 4.0.4
Xen ≫ Xen Version 4.1.0
Xen ≫ Xen Version 4.1.1
Xen ≫ Xen Version 4.1.2
Xen ≫ Xen Version 4.1.3
Xen ≫ Xen Version 4.1.4
Xen ≫ Xen Version 4.1.5
Xen ≫ Xen Version 4.1.6.1
Xen ≫ Xen Version 4.2.0
Xen ≫ Xen Version 4.2.1
Xen ≫ Xen Version 4.2.2
Xen ≫ Xen Version 4.2.3
Xen ≫ Xen Version 4.3.0
Xen ≫ Xen Version 4.3.1
Xen ≫ Xen Version 4.4.0
Xen ≫ Xen Version 4.4.0 Update rc1
Debian ≫ Debian Linux Version 7.0
Fedoraproject ≫ Fedora Version 19
Fedoraproject ≫ Fedora Version 20
Opensuse ≫ Opensuse Version 12.3
Opensuse ≫ Opensuse Version 13.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.97% 0.572
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.8 6.5 6.4
AV:A/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.debian.org/security/2014/dsa-3041
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140418.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140483.html
Third Party Advisory
http://secunia.com/advisories/61890
http://security.gentoo.org/glsa/glsa-201412-42.xml
http://secunia.com/advisories/61858
http://support.citrix.com/article/CTX200218
Third Party Advisory
http://www.securityfocus.com/bid/70057
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030888
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-105.html
Patch
Vendor Advisory