SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2014-4021

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 2.7
Exploit Score: 5.1
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: ADJACENT_NETWORK
Access Complexity: LOW
Authentication: SINGLE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

http://linux.oracle.com/errata/ELSA-2014-0926-1.html

http://linux.oracle.com/errata/ELSA-2014-0926.html

http://support.citrix.com/article/CTX140984

http://xenbits.xen.org/xsa/advisory-100.html

openSUSE-SU-2014:1279

openSUSE-SU-2014:1281


30479



423868



249461



909



195508



282