CVE-2014-9065

Advisory lineage Upstream: 0 Downstream: 3
Modified
Published: 09 Dec 2014, 22:52
Last modified:06 Aug 2024, 13:33

Vulnerability Summary

Overall Risk (default)
low
18/100
CVSS Score
4.4 MEDIUM
v2.0 (nvd)
EPSS Score
0.1% LOW
0% probability +0.03%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Dec 2014, 22:52
Published
Vulnerability first disclosed
06 Aug 2024, 13:33
Last Modified
Vulnerability information updated

Description

common/spinlock.c in Xen 4.4.x and earlier does not properly handle read and write locks, which allows local x86 guest users to cause a denial of service (write denial or NMI watchdog timeout and host crash) via a large number of read requests, a different vulnerability to CVE-2014-9066.

CVSS Metrics

  • v2.0•MEDIUM•Score: 4.4AV:L/AC:M/Au:S/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.10%• Percentile: 28%

Techniques & Countermeasures

  • CWE-17•DEPRECATED: Code

    This entry has been deprecated. It was originally used for organizing the Development View (CWE-699) and some other views, but it introduced unnecessary complexity and depth to the resulting tree.

Affected Systems

  • opensuse•opensuse

    13.1 | 13.2

  • xen•xen

    ≤ 4.4.1

References (6)