PT-2014-5467

CVE-2014-3714

·

Published

2014-05-19

·

Updated

2018-10-30

Description by

CVSS 2.0
3.3
Low
MetricsAV:L/AC:M/Au:N/C:P/I:N/A:P
Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x
Description The issue concerns the ARM image loading functionality, which fails to properly validate kernel length. This allows local users to potentially read system memory or cause a denial of service by crafting a 32-bit ARM guest kernel in an image, leading to a buffer overflow.
Recommendations For Xen version 4.4.x, update to a version that includes the fix for the ARM image loading functionality to prevent buffer overflows.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾