CVE-2014-3968: Medium severity XEN Xen vulnerability
Published Jun 5, 2014
·Updated
The HVMOPinjectmsi function in Xen 4.2.x, 4.3.x, and 4.4.x allows local guest HVM administrators to cause a denial of service (host crash) via a large number of crafted requests, which trigger an error messages to be logged.
Affected Software
10 affected components
XEN Xen=4.3.0
XEN Xen=4.3.1
XEN Xen=4.2.0
XEN Xen=4.2.1
XEN Xen=4.2.2
XEN Xen=4.2.3
openSUSE openSUSE=12.3
openSUSE openSUSE=13.1
XEN Xen=4.4.0
XEN Xen=4.4.0-rc1
Remediation
Patch Available
Event History
Jun 5, 2014
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:55 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3968?
CVE-2014-3968 is considered to have a medium severity due to its potential to cause a denial of service (host crash).
2
How do I fix CVE-2014-3968?
To fix CVE-2014-3968, update your Xen environment to a version that contains the relevant security patch addressing this vulnerability.
3
Which versions of Xen are affected by CVE-2014-3968?
CVE-2014-3968 affects Xen versions 4.2.x, 4.3.x, and 4.4.x.
4
What type of vulnerability is CVE-2014-3968?
CVE-2014-3968 is a denial of service vulnerability that allows local guest HVM administrators to crash the host.
5
Who can exploit CVE-2014-3968?
CVE-2014-3968 can be exploited by local guest HVM administrators through crafted requests.