CVE-2014-8867: Debian Linux

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

The acceleration support for the "REP MOVS" instruction in Xen 4.4.x, 3.2.x, and earlier lacks properly bounds checking for memory mapped I/O (MMIO) emulated in the hypervisor, which allows local HVM guests to cause a denial of service (host crash) via unspecified vectors.

Affected products

• Debian Debian Linux: version 7.0 only
• Opensuse Opensuse: version 13.1 only; version 13.2 only
• Red Hat Enterprise Linux: version 5.0 only
• Red Hat Enterprise Linux Desktop: version 5.0 only
• Xen Xen: up to and including 3.2.0; version 3.2.1 only; version 3.2.2 only; version 3.2.3 only; version 4.4.0 only; version 4.4.1 only

Published 2014-12-01. Last modified 2026-06-17.