tools/libxc/xc_dom_bzimageloader.c in Xen 3.2 3.3 4.0 and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource consumption) via unspecified vectors related to \Lack of error checking in the decompression loop.\