PT-2014-4955

CVE-2014-2915

·

Published

2014-04-24

·

Updated

2018-10-30

Description by

CVSS 2.0
5.5
Medium
MetricsAV:A/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x
Description The issue is related to improper restriction of access to hardware features on ARM systems, which can be exploited by local guest users to cause a denial of service, resulting in a host or guest crash. This is related to cache control, coprocessors, debug registers, and other unspecified registers.
Recommendations For Xen version 4.4.x, restrict access to hardware features to prevent local guest users from causing a denial of service. As a temporary workaround, consider disabling access to cache control, coprocessors, debug registers, and other sensitive registers until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2014-1545
Found an issue in the description? Have something to add? Feel free to write us 👾