Lucene search

K
nvd[email protected]NVD:CVE-2014-3969
HistoryJun 05, 2014 - 8:55 p.m.

CVE-2014-3969

2014-06-0520:55:06
CWE-264
web.nvd.nist.gov
2

CVSS2

7.4

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

65.9%

Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.

Affected configurations

Nvd
Node
xenxenMatch4.4.0
OR
xenxenMatch4.4.0rc1

CVSS2

7.4

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

65.9%