CVE-2014-3969

Severity

74%

Complexity

44%

Confidentiality

165%

Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.

Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.

CVSS 2.0 Base Score 7.4. CVSS Attack Vector: adjacent_network. CVSS Attack Complexity: medium. CVSS Vector: (AV:A/AC:M/Au:S/C:C/I:C/A:C).

Overview

Type

Xen

First reported 10 years ago

2014-06-05 20:55:00

Last updated 6 years ago

2018-10-30 16:26:00

Affected Software

Xen Xen 4.4.0

4.4.0

Xen 4.4.0 release candidate 1

4.4.0

References

58975

Permissions Required

[oss-security] 20140604 Re: Xen Security Advisory 98 - insufficient permissions checks accessing guest memory on ARM

Mailing List, Third Party Advisory

67819

Third Party Advisory, VDB Entry

1030333

Third Party Advisory, VDB Entry

http://xenbits.xen.org/xsa/advisory-98.html

Patch, Vendor Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.