CVE-2014-7188

Xen 4.1-4.4.x - Denial of Service via x2APIC MSR Range Handling

Title source: llm
STIX 2.1

Description

The hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an improper MSR range for x2APIC emulation, which allows local HVM guests to cause a denial of service (host crash) or read data from the hypervisor or other guests via unspecified vectors.

References (17)

Core 17
Core References
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140483.html
Vendor Advisory x_refsource_confirm
http://support.citrix.com/article/CTX201794
Vendor Advisory x_refsource_confirm
http://support.citrix.com/article/CTX200218
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140199.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1030936
Patch, Vendor Advisory x_refsource_confirm
http://xenbits.xen.org/xsa/advisory-108.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140418.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/61664
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2014/dsa-3041
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/61858
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/61890
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201412-42.xml
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/96785
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/70198

Scores

EPSS 0.0236
EPSS Percentile 85.1%

Details

CWE
CWE-399
Status published
Products (15)
xen/xen 4.1.0
xen/xen 4.1.1
xen/xen 4.1.2
xen/xen 4.1.3
xen/xen 4.1.4
xen/xen 4.1.5
xen/xen 4.1.6.1
xen/xen 4.2.0
xen/xen 4.2.1
xen/xen 4.2.2
... and 5 more
Published Oct 02, 2014
Tracked Since Feb 18, 2026