CVE-2014-1896

Xen 4.2.x-4.4-RC - Denial of Service or Privilege Escalation via Crafted Xenstore Ring Indexes

Title source: llm

Description

The (1) do_send and (2) do_recv functions in io.c in libvchan in Xen 4.2.x, 4.3.x, and 4.4-RC series allows local guests to cause a denial of service or possibly gain privileges via crafted xenstore ring indexes, which triggers a "read or write past the end of the ring."

References (6)

Core 6

Core References

Patch x_refsource_confirm

http://xenbits.xen.org/xsa/xsa86.patch

Patch, Vendor Advisory x_refsource_confirm

http://xenbits.xen.org/xsa/advisory-86.html

Mailing List vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-201407-03.xml

Mailing List mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2014/02/10/7

Mailing List mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2014/02/07/12

Scores

EPSS 0.0014

EPSS Percentile 34.1%

Details

CWE

CWE-20

Status published

Products (7)

xen/xen 4.2.0

xen/xen 4.2.1

xen/xen 4.2.2

xen/xen 4.2.3

xen/xen 4.3.0

xen/xen 4.3.1

xen/xen 4.4.0 rc1

Published Apr 01, 2014

Tracked Since Feb 18, 2026