CVE-2014-3969
Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual...
Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.
- Record
CVE-2014-3969- CVSS 2.0
- 7.4 High
AV:A/AC:M/Au:S/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.
- Record
CVE-2014-3969- Updated
- 2026-11-02
EUVDEUVD-2014-3902 No score
Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.
- Record
EUVD-2014-3902- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x7qq-f68c-gw9x No score
Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual...
Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.
- Record
GHSA-x7qq-f68c-gw9x- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-3969 No score
Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via unspecified vectors.
- Record
UBUNTU-CVE-2014-3969- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xenUbuntu:14.04:LTS |
before 4.4.0-0ubuntu5.1, plus listed versions 4.3.0-1ubuntu14.3.0-1ubuntu24.3.0-1ubuntu34.3.0-1ubuntu44.3.0-1ubuntu54.4.0-0ubuntu34.4.0-0ubuntu44.4.0-0ubuntu5 |
4.4.0-0ubuntu5.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3969 is a high vulnerability (CVSS 7.4) in Xen, published June 5, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.65%, the 51st percentile. Fixed in xen 4.4.0-0ubuntu5.1.
References
securitytracker.com/id/1030333
xenbits.xen.org/xsa/advisory-98.html
secunia.com/advisories/58975
securityfocus.com/bid/67819
openwall.com/lists/oss-security/2014/06/04/14
nvd.nist.gov/vuln/detail/CVE-2014-3969
github.com/advisories/GHSA-x7qq-f68c-gw9x
ubuntu.com/security/CVE-2014-3969
cve.org/CVERecord?id=CVE-2014-3969