p PatchFirst

CVE-2014-1642

CVE-2014-1642

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The IRQ setup in Xen 4.2.x and 4.3.x, when using device passthrough and configured to support a large number of CPUs, frees certain memory that may still be intended for use, which allows local guest administrators to cause a denial of service (memory corruption and hypervisor crash) and possibly execute arbitrary code via vectors related to an out-of-memory error that triggers a (1) use-after-free or (2) double free.

EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • xen Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.4.0-1

    Update to 4.4.0-1

  • xen Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.4.0-1

    Update to 4.4.0-1

  • xen Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.4.0-1

    Update to 4.4.0-1

Original sources

Check your server →