Description
The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a denial of service (guest crash) or gain guest kernel mode privileges via vectors involving an (1) HLT, (2) LGDT, (3) LIDT, or (4) LMSW instruction.
References (12)
Core 12
Core References
Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html
Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140483.html
Third Party Advisory vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html
Patch, Vendor Advisory x_refsource_confirm
http://xenbits.xen.org/xsa/advisory-105.html
Third Party Advisory x_refsource_confirm
http://support.citrix.com/article/CTX200218
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030888
Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140418.html
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2014/dsa-3041
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/61858
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/61890
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201412-42.xml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/70057
Scores
EPSS
0.0103
EPSS Percentile
77.6%
Details
CWE
CWE-264
Status
published
Products (42)
debian/debian_linux
7.0
fedoraproject/fedora
19
fedoraproject/fedora
20
opensuse/opensuse
12.3
opensuse/opensuse
13.1
xen/xen
3.0.2
xen/xen
3.0.3
xen/xen
3.0.4
xen/xen
3.1.3
xen/xen
3.1.4
... and 32 more
Published
Oct 02, 2014
Tracked Since
Feb 18, 2026