CVEvulnerability
CVE-2014-3969
7.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-06-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.4 HIGH — AV:A/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.
Affected configurations
• xen xen 4.4.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/58975 Permissions Required
- http://www.openwall.com/lists/oss-security/2014/06/04/14 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/67819 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030333 Third Party Advisory, VDB Entry
- http://xenbits.xen.org/xsa/advisory-98.html Patch, Vendor Advisory
- http://secunia.com/advisories/58975 Permissions Required
- http://www.openwall.com/lists/oss-security/2014/06/04/14 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/67819 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030333 Third Party Advisory, VDB Entry
- http://xenbits.xen.org/xsa/advisory-98.html Patch, Vendor Advisory