CVE-2014-8594: Input Validation

Published Nov 19, 2014

Updated

The dommuupdate function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of service (NULL pointer dereference) by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging (HAP).

Affected Software

21 affected components

openSUSE openSUSE=13.1

openSUSE openSUSE=13.2

Debian Debian Linux=7.0

XEN Xen=4.0.0

XEN Xen=4.0.1

XEN Xen=4.0.2

XEN Xen=4.0.3

XEN Xen=4.0.4

XEN Xen=4.1.0

XEN Xen=4.1.1

XEN Xen=4.1.2

XEN Xen=4.1.3

XEN Xen=4.1.4

XEN Xen=4.1.5

XEN Xen=4.1.6.1

XEN Xen=4.2.0

XEN Xen=4.2.1

XEN Xen=4.2.2

XEN Xen=4.2.3

XEN Xen=4.3.0

XEN Xen=4.3.1

Remediation

Patch Available

http://xenbits.xen.org/xsa/advisory-109.html

Event History

Nov 19, 2014

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-8594?

CVE-2014-8594 has been classified as a medium severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2014-8594?

To fix CVE-2014-8594, update to the latest version of Xen or apply any available security patches.

Who is affected by CVE-2014-8594?

CVE-2014-8594 affects users of Xen versions 4.0.0 through 4.4.x, as well as specific distributions including openSUSE and Debian.

What does CVE-2014-8594 exploit?

CVE-2014-8594 exploits improper restrictions in the do_mmu_update function to allow remote PV guests to trigger a NULL pointer dereference.

What type of vulnerability is CVE-2014-8594?

CVE-2014-8594 is a denial of service vulnerability impacting virtualization environments running Xen.