CVE-2014-2986: Input Validation

Published Apr 28, 2014

Updated

The vgicdistrmmiowrite function in the virtual guest interrupt controller (GIC) distributor (arch/arm/vgic.c) in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denial of service (NULL pointer dereference and host crash) via unspecified vectors.

Affected Software

2 affected components

XEN Xen=4.4.0

XEN Xen=4.4.0-rc1

Remediation

Patch Available

http://xenbits.xen.org/xsa/advisory-94.html

Event History

Apr 28, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

via NVD·02:09 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-2986?

CVE-2014-2986 has a high severity rating due to its potential to cause a denial of service and system crash.

How do I fix CVE-2014-2986?

To fix CVE-2014-2986, you should upgrade to a version of Xen that includes the patch for this vulnerability.

What systems are affected by CVE-2014-2986?

CVE-2014-2986 affects Xen versions 4.4.0 and 4.4.0-rc1 running on ARM systems.

What type of vulnerability is CVE-2014-2986?

CVE-2014-2986 is a vulnerability that allows local guest users to execute a NULL pointer dereference.

Can CVE-2014-2986 lead to remote exploitation?

CVE-2014-2986 is primarily a local denial of service vulnerability and does not allow for direct remote exploitation.