CVE-2014-6268: Medium severity xen xapi vulnerability
Published Jan 12, 2015
·Updated
The evtchnfifosetpending function in Xen 4.4.x allows local guest users to cause a denial of service (host crash) via vectors involving an uninitialized FIFO-based event channel control block when (1) binding or (2) moving an event to a different VCPU.
Affected Software
3 affected components
XEN Xen=4.4.0
XEN Xen=4.4.0-rc1
XEN Xen=4.4.1
Event History
Jan 12, 2015
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6268?
CVE-2014-6268 is classified as a denial of service vulnerability that could lead to a host crash.
2
How do I fix CVE-2014-6268?
To mitigate CVE-2014-6268, it is recommended to upgrade to a patched version of Xen that addresses this vulnerability.
3
Who is affected by CVE-2014-6268?
CVE-2014-6268 affects Xen versions 4.4.0 and 4.4.1, including release candidate versions.
4
What is the impact of CVE-2014-6268?
The impact of CVE-2014-6268 is that it allows unauthenticated local guest users to crash the host system.
5
When was CVE-2014-6268 disclosed?
CVE-2014-6268 was disclosed in 2014 as part of the Xen security advisories.