CVE-2014-5147

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-29 · updated 2026-06-17
Weakness: CWE-264

Description

Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use a different address width, which allows local guest users to cause a denial of service (host crash) via a crafted 32-bit process.

Affected products

xen: 4.4.0, 4.4.0-rc1

References

http://www.securitytracker.com/id/1030724
http://xenbits.xen.org/xsa/advisory-102.html
http://www.securitytracker.com/id/1030724
http://xenbits.xen.org/xsa/advisory-102.html

Get alerted when CVE-2014-5147 or the next vulnerability affects your stack