CVE-2014-8594
개요
CVE.org에서
The do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of service (NULL pointer dereference) by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging (HAP).
내용
Not vulnerable.
This issue did not affect the versions of the kernel-xen package as shipped with Red Hat Enterprise Linux 5.
CVSS (Common Vulnerability Scoring System) 점수 세부 사항
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
다음의 CVSS 지표 및 점수는 예비 정보로 검토 대상입니다.
CVSS v2 점수 분석
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| 기본 점수 | 4.3 | 5.4 | N/A |
| 공격 벡터 | Adjacent Network | Network | N/A |
| 액세스 복잡성 | High | High | N/A |
| 인증 | Single | None | N/A |
| 기밀성에 미치는 영향 | None | None | N/A |
| 무결성에 미치는 영향 | None | None | N/A |
| 가용성에 미치는 영향 | Complete | Complete | N/A |
벡터
Red Hat: AV:A/AC:H/Au:S/C:N/I:N/A:C
NVD: AV:N/AC:H/Au:N/C:N/I:N/A:C
감사의 말
Red Hat would like to thank Xen for reporting this issue.
