CVE-2014-3714 Memory corruption in n/a
Local attackers can read system memory or crash the system via a crafted ARM guest kernel image due to improper validation in Xen.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-3714?
CVE-2014-3714 is a low-severity memory corruption vulnerability in Xen Xen, published on 19 May 2014. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit ARM guest kernel in an image, which triggers a buffer overflow.
Weakness: CWE-20
Which versions are affected by CVE-2014-3714?
It affects 1 product.
Products include Xen Xen.
How do I fix CVE-2014-3714?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2014-3714 being exploited?
There is no known exploitation of CVE-2014-3714 in the wild and no public exploit code.
Other vulnerabilities in Xen Xen
Sources
Also known as GHSA-g8xj-5mrp-c94w, UBUNTU-CVE-2014-3714.