Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-4021
HistoryJun 18, 2014 - 12:00 a.m.

CVE-2014-4021

2014-06-1800:00:00
ubuntu.com
ubuntu.com
9

2.7 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

27.2%

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from
guests, which allows local guest OS users to obtain sensitive information
via unspecified vectors.

Bugs

Notes

Author Note
mdeslaur This is XSA-100
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchxen< 4.1.6.1-0ubuntu0.12.04.2UNKNOWN
ubuntu13.10noarchxen< 4.3.0-1ubuntu1.4UNKNOWN
ubuntu14.04noarchxen< 4.4.0-0ubuntu5.1UNKNOWN
ubuntu14.10noarchxen< 4.4.0-0ubuntu6UNKNOWN
ubuntu15.04noarchxen< 4.4.0-0ubuntu6UNKNOWN

2.7 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

27.2%