VULNERABILITY INTELLIGENCE

CVE-2014-9066

CVSS score4.7 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2014-12-09
Last modified2026-06-17
CVSS vectorAV:L/AC:M/Au:N/C:N/I:N/A:C

Description

Xen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and write locks, which allows local x86 guest users to cause a denial of service (write denial or NMI watchdog timeout and host crash) via a large number of read requests, a different vulnerability than CVE-2014-9065.

Primary references