CVE-2014-3969

Опубликовано: 05 июн. 2014

Источник: nvd

CVSS2: 7.4

EPSS Низкий

Описание

Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.

Ссылки

http://secunia.com/advisories/58975
Permissions Required
http://www.openwall.com/lists/oss-security/2014/06/04/14
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/67819
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030333
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-98.html
Patch
Vendor Advisory
http://secunia.com/advisories/58975
Permissions Required
http://www.openwall.com/lists/oss-security/2014/06/04/14
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/67819
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030333
Third Party Advisory
VDB Entry
http://xenbits.xen.org/xsa/advisory-98.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*

cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*

EPSS

Процентиль: 40%

0.00181

Низкий

7.4 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2014-3969

ubuntu

больше 11 лет назад

Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.

CVE-2014-3969

debian

больше 11 лет назад

Xen 4.4.x, when running on an ARM system, does not properly check writ ...

GHSA-x7qq-f68c-gw9x

github

больше 3 лет назад

Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.

EPSS

Процентиль: 40%

0.00181

Низкий

7.4 High

CVSS2

Дефекты

CWE-264