CVE-2014-3969: High severity XEN Xen vulnerability
Published Jun 5, 2014
·Updated
Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.
Affected Software
2 affected components
XEN Xen=4.4.0
XEN Xen=4.4.0-rc1
Remediation
Patch Available
Event History
Jun 5, 2014
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3969?
CVE-2014-3969 is considered a high severity vulnerability due to its potential to allow privilege escalation by local guest administrators.
2
How do I fix CVE-2014-3969?
To fix CVE-2014-3969, upgrade your Xen hypervisor to a version that addresses this vulnerability, specifically versions later than 4.4.0.
3
Who is affected by CVE-2014-3969?
CVE-2014-3969 affects systems running Xen version 4.4.0 and 4.4.0-rc1 on ARM architecture.
4
What can attackers do with CVE-2014-3969?
Attackers exploiting CVE-2014-3969 can gain elevated privileges within the virtual environment, compromising its security.
5
Is CVE-2014-3969 an ARM-specific issue?
Yes, CVE-2014-3969 specifically affects Xen when run on ARM systems.