CVE-2014-9066

Advisory lineage Upstream: 0 Downstream: 3
Modified
Published: 09 Dec 2014, 22:52
Last modified:06 Aug 2024, 13:33

Vulnerability Summary

Overall Risk (default)
low
19/100
CVSS Score
4.7 MEDIUM
v2.0 (nvd)
EPSS Score
0.11% LOW
0% probability +0.08%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Dec 2014, 22:52
Published
Vulnerability first disclosed
06 Aug 2024, 13:33
Last Modified
Vulnerability information updated

Description

Xen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and write locks, which allows local x86 guest users to cause a denial of service (write denial or NMI watchdog timeout and host crash) via a large number of read requests, a different vulnerability than CVE-2014-9065.

CVSS Metrics

  • v2.0•MEDIUM•Score: 4.7AV:L/AC:M/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.11%• Percentile: 30%

Techniques & Countermeasures

  • CWE-17•DEPRECATED: Code

    This entry has been deprecated. It was originally used for organizing the Development View (CWE-699) and some other views, but it introduced unnecessary complexity and depth to the resulting tree.

Affected Systems

  • opensuse•opensuse

    13.1 | 13.2

  • xen•xen

    ≤ 4.4.1

References (6)