Xen CVE-2014-8867 Denial of Service Vulnerability
BID:71331
Info
Xen CVE-2014-8867 Denial of Service Vulnerability
| Bugtraq ID: | 71331 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2014-8867 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 27 2014 12:00AM |
| Updated: | Nov 03 2015 07:40PM |
| Credit: | Jan Beulich of SUSE |
| Vulnerable: |
Xen Xen 4.0.4 Xen Xen 4.0.1 Xen Xen 4.4 Xen Xen 4.3.1 Xen Xen 4.3.0 Xen Xen 4.3 Xen Xen 4.2.3 Xen Xen 4.2.2 Xen Xen 4.2.1 Xen Xen 4.2.0 Xen Xen 4.2 Xen Xen 4.1.6.1 Xen Xen 4.1.5 Xen Xen 4.1.4 Xen Xen 4.1.3 Xen Xen 4.1.2 Xen Xen 4.1.1 Xen Xen 4.1.0 Xen Xen 4.1 Xen Xen 4.0.3 Xen Xen 4.0.2 Xen Xen 4.0.0 Xen Xen 4.0 Xen Xen 3.4.4 Xen Xen 3.4.3 Xen Xen 3.4.2 Xen Xen 3.4.1 Xen Xen 3.4.0 Xen Xen 3.3.2 Xen Xen 3.3.1 Xen Xen 3.3.0 Xen Xen 3.3 Xen Xen 3.2.3 Xen Xen 3.2.2 Xen Xen 3.2.1 Xen Xen 3.2.0 S.u.S.E. openSUSE 13.2 S.u.S.E. openSUSE 13.1 Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux 5 Oracle Enterprise Linux 5 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix XenServer 6.0.2 Common Criteria Citrix XenServer 6.0.2 Citrix XenServer 4.1 Citrix XenServer 6.2 Service Pack 1 Citrix XenServer 6.2 Citrix XenServer 6.1 Citrix XenServer 6.0 Citrix XenServer 5.6 SP2 Citrix XenServer 5.6 Fp1 Citrix XenServer 5.6 Feature Pack 1 Citrix XenServer 5.6 Common Criteria Citrix XenServer 5.6 Citrix XenServer 5.6 Citrix XenServer 5.5 Citrix XenServer 5.0 Update 3 Citrix XenServer 5.0 Citrix XenServer 5.0 Citrix NetScaler SDX 10.5e Citrix NetScaler SDX 10.5 Build 53.9010.e Citrix NetScaler SDX 10.5 Citrix NetScaler SDX 10.1e Citrix NetScaler SDX 10.1 Build 129.22 Citrix NetScaler SDX 10.1 CentOS CentOS 5 |
| Not Vulnerable: | |
Discussion
Xen CVE-2014-8867 Denial of Service Vulnerability
Xen is prone to a denial-of-service vulnerability.
Attackers with access to a HVM guest operating system can exploit this issue to crash the host operating system, effectively denying service to legitimate users.
Xen versions 3.2.x and later are vulnerable.
Xen is prone to a denial-of-service vulnerability.
Attackers with access to a HVM guest operating system can exploit this issue to crash the host operating system, effectively denying service to legitimate users.
Xen versions 3.2.x and later are vulnerable.
Exploit / POC
Xen CVE-2014-8867 Denial of Service Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Xen CVE-2014-8867 Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.