Vulnerability in Xen

CVE-2014-5147

Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use a different address width, which allows local guest users to cause a denial of service (host crash) via a crafted 32-bit process.

EPSS: 0.004 (34.9th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 4.4.0
  • N/a — versions n/a

Weakness classification (CWE)

References