CVE-2014-3124 in Xen

Summary

The HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to cause a denial of service (hypervisor crash) or possibly execute arbitrary code by leveraging a separate qemu-dm vulnerability to trigger invalid page table translations for unspecified memory page types.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

04/29/2014

Disclosure

05/07/2014

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
13151	Linux Foundation Xen Page Transition HVMOP_set_mem_type access control	264	Unproven	Official fix	CVE-2014-3124
13087	Linux Foundation Xen hvm.c HVMOP_set_mem_type access control	264	Not defined	Official fix	CVE-2014-3124

Sources

• MITRE
• NVD
• CVE Details