CVE-2014-3125: Medium severity XEN Xen vulnerability
Published May 2, 2014
·Updated
Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTLEL1 register, which allows local guest users to modify the hardware timers and cause a denial of service (crash) via unspecified vectors.
Affected Software
2 affected components
XEN Xen=4.4.0
XEN Xen=4.4.0-rc1
Remediation
Patch Available
Event History
May 2, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3125?
The severity of CVE-2014-3125 is classified as a denial of service vulnerability.
2
How do I fix CVE-2014-3125?
To fix CVE-2014-3125, upgrade to a version of Xen that has addressed the vulnerability.
3
Who is affected by CVE-2014-3125?
CVE-2014-3125 affects users running Xen 4.4.0 and 4.4.0-rc1 on ARM systems.
4
What types of attacks can exploit CVE-2014-3125?
CVE-2014-3125 can be exploited by local guest users to cause a denial of service attack resulting in a crash.
5
Is CVE-2014-3125 specific to any operating system?
Yes, CVE-2014-3125 is specific to Xen running on ARM architecture.