Xen CVE-2014-8595 Local Privilege Escalation Vulnerability

Bugtraq ID:	71151
Class:	Design Error
CVE:	CVE-2014-8595
Remote:	No
Local:	Yes
Published:	Nov 18 2014 12:00AM
Updated:	Nov 03 2015 07:40PM
Credit:	Jan Beulich
Vulnerable:	Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix XenServer 4.1 Citrix XenServer 6.0 Citrix XenServer 5.6 SP2 Citrix XenServer 5.6 Feature Pack 1 Citrix XenServer 5.6 Common Criteria Citrix XenServer 5.6 Citrix XenServer 5.5 Citrix XenServer 5.0 Update 3 Citrix XenServer 5.0
Not Vulnerable:

Xen CVE-2014-8595 Local Privilege Escalation Vulnerability

Xen is prone to a local privilege-escalation vulnerability.

Local attackers with access to a guest operating system can exploit this issue to gain elevated privileges on affected computers or cause denial-of-service condition.

Xen CVE-2014-8595 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Xen CVE-2014-8595 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Xen CVE-2014-8595 Local Privilege Escalation Vulnerability

References:

• XenSource Homepage (XenSource)