VULNERABILITY INTELLIGENCE
CVE-2014-3969
CVSS score7.4 HIGH
EPSS probability0.65%
CISA KEVNot currently listed
Published2014-06-05
Last modified2026-06-17
CVSS vectorAV:A/AC:M/Au:S/C:C/I:C/A:C
Description
Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.
Primary references
- cve@mitre.org — Permissions Required
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory