PT-2014-5467
CVE-2014-3714
·
تاريخ النشر
2014-05-19
·
تاريخ التحديث
2018-10-30
الوصف من
CVSS 2.0
3.3
منخفضةالمقاييسAV:L/AC:M/Au:N/C:P/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Xen versions 4.4.x
Description
The issue concerns the ARM image loading functionality, which fails to properly validate kernel length. This allows local users to potentially read system memory or cause a denial of service by crafting a 32-bit ARM guest kernel in an image, leading to a buffer overflow.
Recommendations
For Xen version 4.4.x, update to a version that includes the fix for the ARM image loading functionality to prevent buffer overflows.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾