CVE-2014-3967

Fixed in a distro release EPSS <1%

The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return value from the IRQ setup check, which allows local HVM guest administrators to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.

Published 2014-06-05 · CVE record · OSV

Products: xen, opensuse

Distro releases