Lucene search
HistoryJul 09, 2014 - 2:55 p.m.
CVE-2014-4022
xen
arm
security vulnerability
cve-2014-4022
nvd
5.8 Medium
AI Score
Confidence
Low
2.7 Low
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
23.5%
The alloc_domain_struct function in arch/arm/domain.c in Xen 4.4.x, when running on an ARM platform, does not properly initialize the structure containing the grant table pages for a domain, which allows local guest administrators to obtain sensitive information via the GNTTABOP_setup_table subhypercall.
Affected configurations
Node
xenxenMatch4.4.0
ORxenxenMatch4.4.0rc1
Related
redhatcve
redhatcve
CVE-2014-4022
2015-10-30 10:28:39
ubuntucve
ubuntucve
CVE-2014-4022
2014-07-09 00:00:00
prion
prion
Information disclosure
2014-07-09 14:55:00
debiancve
debiancve
CVE-2014-4022
2014-07-09 14:55:03
xen
xen
information leak via gnttab_setup_table on ARM
2014-06-25 12:00:00
cvelist
cvelist
CVE-2014-4022
2014-07-09 14:00:00
nvd
nvd
CVE-2014-4022
2014-07-09 14:55:03
5.8 Medium
AI Score
Confidence
Low
2.7 Low
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:A/AC:L/Au:S/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
23.5%
Related for CVE-2014-4022