CVE-2014-3717
Xen 4.4.x - Denial of Service via 64-bit ARM Guest Kernel Load Address Validation
Title source: llmDescription
Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a denial of service (crash) via a crafted kernel, which triggers a buffer overflow.
References (5)
Core 5
Core References
Patch, Vendor Advisory x_refsource_confirm
http://xenbits.xen.org/xsa/advisory-95.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030252
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/05/14/4
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/05/16/1
Mailing List, Third Party Advisory mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2014/05/15/6
Scores
EPSS
0.0018
EPSS Percentile
39.6%
Details
CWE
CWE-20
Status
published
Products (1)
xen/xen
4.4.0 (2 CPE variants)
Published
May 19, 2014
Tracked Since
Feb 18, 2026