CVE-2014-7154

Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain local guest domains to cause a denial of service via unspecified vectors.

• CWE-362

• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140418.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140483.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.htmlThird Party Advisory
• http://secunia.com/advisories/61501
• http://secunia.com/advisories/61890
• http://security.gentoo.org/glsa/glsa-201412-42.xml
• http://www.debian.org/security/2014/dsa-3041Third Party Advisory
• http://www.securitytracker.com/id/1030887Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-104.htmlPatch, Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140418.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140483.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.htmlThird Party Advisory
• http://secunia.com/advisories/61501
• http://secunia.com/advisories/61890
• http://security.gentoo.org/glsa/glsa-201412-42.xml
• http://www.debian.org/security/2014/dsa-3041Third Party Advisory
• http://www.securitytracker.com/id/1030887Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-104.htmlPatch, Vendor Advisory

Published

Oct 2, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-7144OpenStack keystonemiddleware (formerly python-keystoneclient…
• CVE-2014-7145The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux ker…
• CVE-2014-7146The XmlImportExport plugin in MantisBT 1.2.17 and earlier al…
• CVE-2014-7151Multiple cross-site scripting (XSS) vulnerabilities in the N…
• CVE-2014-7152Cross-site scripting (XSS) vulnerability in the Easy MailChi…
• CVE-2014-7153SQL injection vulnerability in the editgallery function in a…
• CVE-2014-7155The x86_emulate function in arch/x86/x86_emulate/x86_emulate…
• CVE-2014-7156The x86_emulate function in arch/x86/x86_emulate/x86_emulate…
• CVE-2014-7157Cross-site scripting (XSS) vulnerability in Exinda WAN Optim…
• CVE-2014-7158Cross-site request forgery (CSRF) vulnerability in Exinda WA…
• CVE-2014-7169GNU Bash through 4.3 bash43-025 processes trailing strings a…9.8
• CVE-2014-7170Race condition in Puppet Server 0.2.0 allows local users to …