CVE-2014-5149 in Xen
Summary
Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5146.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
07/30/2014
Disclosure
08/22/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67314 | Linux Foundation Xen MMU Virtualization resource management | 399 | Unproven | Official fix | CVE-2014-5149 |