CVE-2014-3714 in Xen
摘要 (英语)
The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit ARM guest kernel in an image, which triggers a buffer overflow.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
预定
2014-05-14
披露
2014-05-19
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 13235 | Linux Foundation Xen Xen Tools 权限提升 | 20 | 未经证实 | 官方修复 | CVE-2014-3714 |