Vulnetix
Try Vulnetix Request Demo
CVE-2014-1896 PUBLISHED CVSS 4.900000095367432 MEDIUM

The (1) do_send and (2) do_recv functions in io.c in libvchan in Xen 4.2.x, 4.3.x, and 4.4-RC series allows local guests to cause a denial of service or possibly gain privileges via crafted xenstore ring indexes, which triggers a "read or write past the end of the ring."

EPSS 0.14% · 34.5th percentile

Risk Scores

CVSS v2.0
4.900000095367432
EPSS Score
0.14%
34.5th percentile

Affected Products

VendorProductVersions
xenxen4.4.0, 4.2.0, 4.2.1
n/an/an/a

Timeline

References

Open in Interactive Console →