CVE-2014-8594

Published Nov 19, 2014

Last updated 6 years ago

Overview

Description
The do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of service (NULL pointer dereference) by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging (HAP).
Source
cve@mitre.org
NVD status
Modified

Risk scores

CVSS 2.0

Type
Primary
Base score
5.4
Impact score
6.9
Exploitability score
4.9
Vector string
AV:N/AC:H/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov
CWE-20

Social media

Hype score
Not currently trending

Configurations