VDB

DEBIAN-CVE-2014-7155

DEBIAN-CVE-2014-7155 PUBLISHED CVSS 8.699999809265137 HIGH

The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a denial of service (guest crash) or gain guest kernel mode privileges via vectors involving an (1) HLT, (2) LGDT, (3) LIDT, or (4) LMSW instruction.

Risk Scores

CVSS v4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Debian:12xen0, 0, 0
Debian:14xen0, 0, 0
Debian:11xen0, 0, 0
Debian:13xen0, 0, 0

Timeline

  • Oct 2, 2014 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›