CVE-2014-1666
- Source
- https://cve.org/CVERecord?id=CVE-2014-1666
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2014-1666.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2014-1666
- Downstream
- Published
- 2014-01-26T16:58:11Z
- Modified
- 2026-04-10T03:43:36.816077Z
- Summary
- [none]
- Details
-
The dophysdevop function in Xen 4.1.5, 4.1.6.1, 4.2.2 through 4.2.3, and 4.3.x does not properly restrict access to the (1) PHYSDEVOPpreparemsix and (2) PHYSDEVOPreleasemsix operations, which allows local PV guests to cause a denial of service (host or guest malfunction) or possibly gain privileges via unspecified vectors.
- References
-
- http://secunia.com/advisories/56650
- http://security.gentoo.org/glsa/glsa-201407-03.xml
- http://xenbits.xen.org/xsa/advisory-87.html
- http://xenbits.xen.org/xsa/xsa87-unstable-4.3.patch
- http://xenbits.xen.org/xsa/xsa87-unstable-4.3.patch
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127580.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127607.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html
- http://osvdb.org/102536
- http://support.citrix.com/article/CTX200288
- http://www.openwall.com/lists/oss-security/2014/01/24/6
- http://www.securityfocus.com/bid/65125
- http://www.securitytracker.com/id/1029684
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90675