CVE-2014-7155 - CERT CVE
ID CVE-2014-7155
Sažetak The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a denial of service (guest crash) or gain guest kernel mode privileges via vectors involving an (1) HLT, (2) LGDT, (3) LIDT, or (4) LMSW instruction.
Reference
CVSS
Base: 5.8
Impact: 6.4
Exploitability:6.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL PARTIAL
CVSS vektor AV:A/AC:L/Au:N/C:P/I:P/A:P
Zadnje važnije ažuriranje 30-10-2018 - 16:27
Objavljeno 02-10-2014 - 14:55