#VU41491 Information disclosure in Xen - CVE-2014-4022


| Updated: 2020-08-10

Vulnerability identifier: #VU41491

Vulnerability risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2014-4022

CWE-ID: CWE-200

Exploitation vector: Local network

Exploit availability: No

Vulnerable software:
Xen
Server applications / Virtualization software

Vendor: Xen Project

Description

The vulnerability allows a remote #AU# to gain access to sensitive information.

The alloc_domain_struct function in arch/arm/domain.c in Xen 4.4.x, when running on an ARM platform, does not properly initialize the structure containing the grant table pages for a domain, which allows local guest administrators to obtain sensitive information via the GNTTABOP_setup_table subhypercall.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Xen: 4.4.0


External links
https://secunia.com/advisories/59523
https://www.securityfocus.com/bid/68184
https://www.securitytracker.com/id/1030471
https://xenbits.xen.org/xsa/advisory-101.html


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability