CVE-2014-5148

Xen 4.4.x, when running on an ARM system and "handling an unknown system register access from 64-bit userspace," returns to an instruction of the trap handler for kernel space faults instead of an instruction that is associated with faults in 64-bit userspace, which allows local guest users to cause a denial of service (crash) and possibly gain privileges via a crafted process.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/59934
http://www.securityfocus.com/bid/69189
http://www.securitytracker.com/id/1030725
http://xenbits.xenproject.org/xsa/advisory-103.html	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95233
http://secunia.com/advisories/59934
http://www.securityfocus.com/bid/69189
http://www.securitytracker.com/id/1030725
http://xenbits.xenproject.org/xsa/advisory-103.html	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95233

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:xen:xen:4.4.1::::::x64:
	cpe:2.3:o:xen:xen:4.4.0:-:::::x64:*

History

21 Nov 2024, 02:11

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/59934 -~~	() http://secunia.com/advisories/59934 -
References	~~() http://www.securityfocus.com/bid/69189 -~~	() http://www.securityfocus.com/bid/69189 -
References	~~() http://www.securitytracker.com/id/1030725 -~~	() http://www.securitytracker.com/id/1030725 -
References	~~() http://xenbits.xenproject.org/xsa/advisory-103.html - Patch, Vendor Advisory~~	() http://xenbits.xenproject.org/xsa/advisory-103.html - Patch, Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/95233 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/95233 -

Information

Published : 2014-10-26 20:55

Updated : 2024-11-21 02:11

NVD link : CVE-2014-5148

Mitre link : CVE-2014-5148

CVE.ORG link : CVE-2014-5148

JSON object : View

Products Affected

xen

xen

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2014-5148", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-10-26T20:55:03.180", "references": [{"url": "http://secunia.com/advisories/59934", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/69189", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1030725", "source": "cve@mitre.org"}, {"url": "http://xenbits.xenproject.org/xsa/advisory-103.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95233", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/59934", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/69189", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1030725", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://xenbits.xenproject.org/xsa/advisory-103.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/95233", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Xen 4.4.x, when running on an ARM system and \"handling an unknown system register access from 64-bit userspace,\" returns to an instruction of the trap handler for kernel space faults instead of an instruction that is associated with faults in 64-bit userspace, which allows local guest users to cause a denial of service (crash) and possibly gain privileges via a crafted process."}, {"lang": "es", "value": "Xen 4.4.x, cuando funciona con un sistema ARM y 'maneja un acceso al registro de un sistema desconocido de un espacio de usuario de 64 bits,' vuelve a una instrucci\u00f3n del manejador trap para fallos en espacios del kernel en lugar de una instrucci\u00f3n que est\u00e1 asociada con fallos en el espacio de usuario de 64 bits, lo que permite a usuarios locales invitados causar una denegaci\u00f3n de servicio (ca\u00edda) y posiblemente ganar privilegios a trav\u00e9s de un proceso manipulado."}], "lastModified": "2024-11-21T02:11:30.450", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:xen:xen:4.4.1:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "9C5E8C20-423F-4B21-A116-7BFF6270797B"}, {"criteria": "cpe:2.3:o:xen:xen:4.4.0:-:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "0E8E655C-E53B-4EED-A528-4DB3EFF1A1CA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}