PT-2014-4955
CVE-2014-2915
·
Published
2014-04-24
·
Updated
2018-10-30
Description by
CVSS 2.0
5.5
MediumMetricsAV:A/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Xen versions 4.4.x
Description
The issue is related to improper restriction of access to hardware features on ARM systems, which can be exploited by local guest users to cause a denial of service, resulting in a host or guest crash. This is related to cache control, coprocessors, debug registers, and other unspecified registers.
Recommendations
For Xen version 4.4.x, restrict access to hardware features to prevent local guest users from causing a denial of service. As a temporary workaround, consider disabling access to cache control, coprocessors, debug registers, and other sensitive registers until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾