PT-2014-5679 · Citrix · Xen

Julien Grall · Published 2014-07-09 · Updated 2018-10-30 · CVE-2014-4022

Positive Technologies (AI Summary)

CVSS v2.0

2.7

Low

Base vector

AV:A/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x

Description The issue arises from the alloc domain struct function in arch/arm/domain.c, which fails to properly initialize the structure containing the grant table pages for a domain when running on an ARM platform. This allows local guest administrators to obtain sensitive information via the GNTTABOP setup table subhypercall.

Recommendations For Xen version 4.4.x, consider restricting access to the GNTTABOP setup table subhypercall until a proper fix is applied. As a temporary workaround, review and limit the privileges of local guest administrators to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-4022

Affected Products

Xen

References · 9

• http://xenbits.xen.org/xsa/advisory-101.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-4022 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-4022 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-4022 · Security Note
• https://ubuntu.com/security/CVE-2014-4022 · Vendor Advisory
• http://securitytracker.com/id/1030471 · Note
• http://seclists.org/oss-sec/2014/q2/708 · Note
• http://secunia.com/advisories/59523 · Note
• http://securityfocus.com/bid/68184 · Note