Xen CVE-2014-8866 Denial of Service Vulnerability

Bugtraq ID:	71332
Class:	Unknown
CVE:	CVE-2014-8866
Remote:	Yes
Local:	No
Published:	Nov 27 2014 12:00AM
Updated:	Nov 03 2015 07:40PM
Credit:	Jan Beulich
Vulnerable:	Xen Xen 4.0.4 Xen Xen 4.0.1 Xen Xen 4.4 Xen Xen 4.3.1 Xen Xen 4.3.0 Xen Xen 4.3 Xen Xen 4.2.3 Xen Xen 4.2.2 Xen Xen 4.2.1 Xen Xen 4.2.0 Xen Xen 4.2 Xen Xen 4.1.6.1 Xen Xen 4.1.5 Xen Xen 4.1.4 Xen Xen 4.1.3 Xen Xen 4.1.2 Xen Xen 4.1.1 Xen Xen 4.1.0 Xen Xen 4.1 Xen Xen 4.0.3 Xen Xen 4.0.2 Xen Xen 4.0.0 Xen Xen 4.0 Xen Xen 3.4.4 Xen Xen 3.4.3 Xen Xen 3.4.2 Xen Xen 3.4.1 Xen Xen 3.4.0 Xen Xen 3.3.2 Xen Xen 3.3.1 Xen Xen 3.3.0 Xen Xen 3.3 S.u.S.E. openSUSE 13.2 S.u.S.E. openSUSE 13.1 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix XenServer 6.0.2 Common Criteria Citrix XenServer 6.0.2 Citrix XenServer 4.1 Citrix XenServer 6.2 Service Pack 1 Citrix XenServer 6.2 Citrix XenServer 6.1 Citrix XenServer 6.0 Citrix XenServer 5.6 SP2 Citrix XenServer 5.6 Fp1 Citrix XenServer 5.6 Feature Pack 1 Citrix XenServer 5.6 Common Criteria Citrix XenServer 5.6 Citrix XenServer 5.6 Citrix XenServer 5.5 Citrix XenServer 5.0 Update 3 Citrix XenServer 5.0 Citrix XenServer 5.0 Citrix NetScaler SDX 10.5e Citrix NetScaler SDX 10.5 Build 53.9010.e Citrix NetScaler SDX 10.5 Citrix NetScaler SDX 10.1e Citrix NetScaler SDX 10.1 Build 129.22 Citrix NetScaler SDX 10.1
Not Vulnerable:

Xen CVE-2014-8866 Denial of Service Vulnerability

Xen is prone to a denial-of-service vulnerability.

Attackers with access to a guest HVM operating system can exploit this issue to crash the host operating system, effectively denying service to legitimate users.

Xen CVE-2014-8866 Denial of Service Vulnerability

References:

• Xen Homepage (Citrix)