CVE-2014-3559: Low severity red hat enterprise virtualization vulnerability
IssueDescription:
It was found that the oVirt storage back end did not wipe memory snapshots when VMs were deleted, even if wipe-after-delete (WAD) was enabled for the VM's disks. A remote attacker with credentials to create a new VM could use this flaw to potentially access the contents of memory snapshots in an uninitialized storage volume, possibly leading to the disclosure of sensitive information.
Other sources
The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots when deleting a VM, even when wipe-after-delete (WAD) is configured for the VM's disk, which allows remote authenticated users with certain credentials to read portions of the deleted VM's memory and obtain sensitive information via an uninitialized storage volume.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3559?
CVE-2014-3559 is considered a moderate security vulnerability due to the potential exposure of sensitive data from memory snapshots.
How do I fix CVE-2014-3559?
To mitigate CVE-2014-3559, ensure that you are running a patched version of Red Hat Enterprise Virtualization 3.4 that addresses this vulnerability.
Who is affected by CVE-2014-3559?
CVE-2014-3559 affects users of Red Hat Enterprise Virtualization 3.4 where memory snapshots are not properly wiped upon VM deletion.
What kind of attack can be performed with CVE-2014-3559?
A remote attacker with the ability to create a new VM could potentially access sensitive information from memory snapshots left behind by deleted VMs.
Is CVE-2014-3559 a client-side or server-side vulnerability?
CVE-2014-3559 is a server-side vulnerability affecting the oVirt storage back end of Red Hat Enterprise Virtualization.