Every CVE Search/ Get API key

CVE-2014-5149

Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables,...

4.7 MediumFix available

Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5146.

Exploit likelihood

0.43%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.7

Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5146.

Record
CVE-2014-5149
CVSS 2.0
4.7 MediumAV:L/AC:M/Au:N/C:N/I:N/A:C
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5146.

Record
CVE-2014-5149
Updated
2026-11-02
EUVDEUVD-2014-5047 No score

Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5146.

Record
EUVD-2014-5047
Updated
2026-11-03
GitHub AdvisoriesGHSA-3jrv-3c97-g969 No score

Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables,...

Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5146.

Record
GHSA-3jrv-3c97-g969
Updated
2026-11-02
OSV No score

Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5146.

Record
CVE-2014-5149
Updated
2026-11-02
OSVDEBIAN-CVE-2014-5149 No score

Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5146.

Record
DEBIAN-CVE-2014-5149
Updated
2026-11-02
OSVopenSUSE-SU-2024:10196-1 No score

xen-4.7.0_12-1.3 on GA media

These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10196-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xen
Debian:12
before 4.4.1-4
4.4.1-4
xen
Debian:13
before 4.4.1-4
4.4.1-4
xen
Debian:14
before 4.4.1-4
4.4.1-4
xen
openSUSE:Tumbleweed
From an advisory covering 124 CVEs
before 4.7.0_12-1.3
4.7.0_12-1.3

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-5149 is a medium vulnerability (CVSS 4.7) in Xen, published August 22, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in xen 4.4.1-4.

References

Show 130 moreShow less
MoveEnter Open