p PatchFirst

CVE-2014-5149

CVE-2014-5149

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5146.

EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • xen Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.4.1-4

    Update to 4.4.1-4

  • xen Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.4.1-4

    Update to 4.4.1-4

  • xen Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.4.1-4

    Update to 4.4.1-4

Original sources

Check your server →