CVE-2014-1892: Xen

Medium severity, CVSS 5.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Xen 3.3 through 4.1, when XSM is enabled, allows local users to cause a denial of service via vectors related to a "large memory allocation," a different vulnerability than CVE-2014-1891, CVE-2014-1893, and CVE-2014-1894.

Affected products

• Xen Xen: version 3.3.0 only; version 3.3.1 only; version 3.3.2 only; version 3.4.0 only; version 3.4.1 only; version 3.4.2 only; …

Published 2014-04-01. Last modified 2026-06-17.