CVE-2014-3717

no score yetEPSS 0.4%

xen xen: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.

Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a denial of service (crash) via a crafted kernel, which triggers a buffer overflow.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2014-05-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xen:xen

References

http://www.openwall.com/lists/oss-security/2014/05/14/4
http://www.openwall.com/lists/oss-security/2014/05/15/6
http://www.openwall.com/lists/oss-security/2014/05/16/1
http://www.securitytracker.com/id/1030252
http://xenbits.xen.org/xsa/advisory-95.html

Check your stack JSON