1. Home
  2. CVE Database
  3. CVE-2014-5147
MEDIUM · 4.3

CVE-2014-5147

Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use a different address width, which allows local guest users to cause a denial of s...

Vulnerability Description

Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use a different address width, which allows local guest users to cause a denial of service (host crash) via a crafted 32-bit process.

CVSS Score

4.3

MEDIUM

AV:A/AC:H/Au:S/C:N/I:N/A:C
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE

Affected Products

VendorProductVersions
XenXen4.4.0

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2014-5147?

CVE-2014-5147 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use a different address width, which allows local guest users to cause a denial of s...

How severe is CVE-2014-5147?

CVE-2014-5147 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-5147?

Check the references section above for vendor advisories and patch information. Affected products include: Xen Xen.