The evtchnfifoset_pending function in Xen 4.4.x allows local guest users to cause a denial of service (host crash) via vectors involving an uninitialized FIFO-based event channel control block when (1) binding or (2) moving an event to a different VCPU.
{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "libxen-4.4",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "libxen-dev",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "libxen-ocaml",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "libxen-ocaml-dev",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "libxenstore3.0",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "xen-hypervisor-4.1-amd64",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "xen-hypervisor-4.3-amd64",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "xen-hypervisor-4.3-armhf",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "xen-hypervisor-4.4-amd64",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "xen-hypervisor-4.4-arm64",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "xen-hypervisor-4.4-armhf",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "xen-system-amd64",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "xen-system-arm64",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "xen-system-armhf",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "xen-utils-4.4",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "xen-utils-common",
            "binary_version": "4.4.0-0ubuntu5.2"
        },
        {
            "binary_name": "xenstore-utils",
            "binary_version": "4.4.0-0ubuntu5.2"
        }
    ]
}