CVE-2014-3969

Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.
References
Link Resource
http://secunia.com/advisories/58975 Permissions Required
http://www.openwall.com/lists/oss-security/2014/06/04/14 Mailing List Third Party Advisory
http://www.securityfocus.com/bid/67819 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1030333 Third Party Advisory VDB Entry
http://xenbits.xen.org/xsa/advisory-98.html Patch Vendor Advisory
http://secunia.com/advisories/58975 Permissions Required
http://www.openwall.com/lists/oss-security/2014/06/04/14 Mailing List Third Party Advisory
http://www.securityfocus.com/bid/67819 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1030333 Third Party Advisory VDB Entry
http://xenbits.xen.org/xsa/advisory-98.html Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*

History

21 Nov 2024, 02:09

Type Values Removed Values Added
References () http://secunia.com/advisories/58975 - Permissions Required () http://secunia.com/advisories/58975 - Permissions Required
References () http://www.openwall.com/lists/oss-security/2014/06/04/14 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2014/06/04/14 - Mailing List, Third Party Advisory
References () http://www.securityfocus.com/bid/67819 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/67819 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1030333 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1030333 - Third Party Advisory, VDB Entry
References () http://xenbits.xen.org/xsa/advisory-98.html - Patch, Vendor Advisory () http://xenbits.xen.org/xsa/advisory-98.html - Patch, Vendor Advisory

Information

Published : 2014-06-05 20:55

Updated : 2024-11-21 02:09


NVD link : CVE-2014-3969

Mitre link : CVE-2014-3969

CVE.ORG link : CVE-2014-3969


JSON object : View

Products Affected

xen

  • xen
CWE
CWE-264

Permissions, Privileges, and Access Controls