CVE-2014-1893: Integer Overflow
Multiple integer overflows in the (1) FLASKGETBOOL and (2) FLASKSETBOOL suboperations in the flask hypercall in Xen 4.1.x, 3.3.x, 3.2.x, and earlier, when XSM is enabled, allow local users to cause a denial of service (processor fault) via unspecified vectors, a different vulnerability than CVE-2014-1891, CVE-2014-1892, and CVE-2014-1894.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1893?
CVE-2014-1893 is classified as a high severity vulnerability due to its potential to cause denial of service through integer overflows.
How do I fix CVE-2014-1893?
To fix CVE-2014-1893, you should upgrade to a version of Xen that is not affected, specifically later than 4.1.6.1.
What types of systems are affected by CVE-2014-1893?
CVE-2014-1893 affects various versions of Xen, including 4.1.x, 3.3.x, and earlier versions.
Can I use any workarounds for CVE-2014-1893?
There are no documented workarounds for CVE-2014-1893; upgrading to a safe version is recommended.
Who is primarily impacted by CVE-2014-1893?
Local users of systems running vulnerable versions of Xen may be primarily impacted by CVE-2014-1893.