CVE-2014-1895: Medium severity XEN Xen vulnerability

Published Apr 1, 2014

Updated

Off-by-one error in the flasksecurityavccachestats function in xsm/flask/flaskop.c in Xen 4.2.x and 4.3.x, when the maximum number of physical CPUs are in use, allows local users to cause a denial of service (host crash) or obtain sensitive information from hypervisor memory by leveraging a FLASKAVCCACHESTAT hypercall, which triggers a buffer over-read.

Affected Software

6 affected components

XEN Xen=4.2.0

XEN Xen=4.2.1

XEN Xen=4.2.2

XEN Xen=4.2.3

XEN Xen=4.3.0

XEN Xen=4.3.1

Remediation

Patch Available

http://xenbits.xen.org/xsa/advisory-85.html

Event History

Apr 1, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·06:35 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-1895?

CVE-2014-1895 has a severity level that can lead to denial of service or exposure of sensitive information.

How do I fix CVE-2014-1895?

To fix CVE-2014-1895, it is recommended to upgrade to a fixed version of Xen beyond the 4.3.x series.

Who is affected by CVE-2014-1895?

CVE-2014-1895 affects local users of Xen 4.2.x and 4.3.x when the maximum number of physical CPUs is in use.

What types of vulnerabilities are related to CVE-2014-1895?

CVE-2014-1895 is related to an off-by-one error that can lead to a denial of service condition.

Can CVE-2014-1895 lead to data leaks?

Yes, CVE-2014-1895 can potentially expose sensitive information from hypervisor memory.