Xen ARM 'CNTKCTL_EL1' Register Local Denial of Service Vulnerability

Bugtraq ID:	67157
Class:	Unknown
CVE:	CVE-2014-3125
Remote:	No
Local:	Yes
Published:	Apr 30 2014 12:00AM
Updated:	May 02 2014 12:02PM
Credit:	Chen Baozi
Vulnerable:
Not Vulnerable:

Xen ARM 'CNTKCTL_EL1' Register Local Denial of Service Vulnerability

Xen is prone to a local denial-of-service vulnerability.

Local attackers with access to a guest operating system can exploit this issue to crash the guest operating system, effectively denying service to legitimate users.

Xen 4.4 and later are vulnerable.

Xen ARM 'CNTKCTL_EL1' Register Local Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Xen ARM 'CNTKCTL_EL1' Register Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Xen ARM 'CNTKCTL_EL1' Register Local Denial of Service Vulnerability

References:

• Xen Homepage (Citrix)