CVE-2014-3716
Xen 4.4.x - Denial of Service via DTB Header Alignment Check Bypass
Title source: llmDescription
Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspecified field in a DTB header in a 32-bit guest kernel.
References (5)
Core 5
Core References
Patch, Vendor Advisory x_refsource_confirm
http://xenbits.xen.org/xsa/advisory-95.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030252
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/05/14/4
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/05/16/1
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/05/15/6
Scores
EPSS
0.0015
EPSS Percentile
34.6%
Details
CWE
CWE-20
Status
published
Products (1)
xen/xen
4.4.0 (2 CPE variants)
Published
May 19, 2014
Tracked Since
Feb 18, 2026