CVE-2014-3967
05.06.2014, 20:55
The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return value from the IRQ setup check, which allows local HVM guest administrators to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| xen | xen | 4.2.0 |
| xen | xen | 4.2.1 |
| xen | xen | 4.2.2 |
| xen | xen | 4.2.3 |
| xen | xen | 4.4.0 |
| xen | xen | 4.4.0:rc1 |
| opensuse | opensuse | 12.3 |
| opensuse | opensuse | 13.1 |
| xen | xen | 4.3.0 |
| xen | xen | 4.3.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References