VULNERABILITY INTELLIGENCE

CVE-2014-1896

CVSS score4.9 MEDIUM
EPSS probability0.54%
CISA KEVNot currently listed
Published2014-04-01
Last modified2026-06-17
CVSS vectorAV:A/AC:M/Au:S/C:P/I:P/A:P

Description

The (1) do_send and (2) do_recv functions in io.c in libvchan in Xen 4.2.x, 4.3.x, and 4.4-RC series allows local guests to cause a denial of service or possibly gain privileges via crafted xenstore ring indexes, which triggers a "read or write past the end of the ring."

Weakness classification

  • CWE-20: Improper Input Validation

Primary references