CVE-2014-3967: Null Pointer Dereference

Published Jun 5, 2014

Updated

The HVMOPinjectmsi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return value from the IRQ setup check, which allows local HVM guest administrators to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.

Affected Software

10 affected components

XEN Xen=4.2.0

XEN Xen=4.2.1

XEN Xen=4.2.2

XEN Xen=4.2.3

XEN Xen=4.4.0

XEN Xen=4.4.0-rc1

openSUSE openSUSE=12.3

openSUSE openSUSE=13.1

XEN Xen=4.3.0

XEN Xen=4.3.1

Remediation

Patch Available

http://xenbits.xen.org/xsa/advisory-96.html

Event History

Jun 5, 2014

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

via NVD·08:55 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-3967?

CVE-2014-3967 is considered a high-severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2014-3967?

To mitigate CVE-2014-3967, it is recommended to update Xen to the latest patched version that addresses this vulnerability.

What versions of Xen are affected by CVE-2014-3967?

CVE-2014-3967 affects Xen versions 4.2.x, 4.3.x, and 4.4.x, including specific releases like 4.2.0 through 4.2.3 and all 4.4.0 versions.

Who can exploit CVE-2014-3967?

Local HVM guest administrators can exploit CVE-2014-3967 to trigger its denial of service condition.

What impact does CVE-2014-3967 have on system stability?

CVE-2014-3967 can lead to a null pointer dereference, causing a crash and resulting in instability of the affected system.