CVE-2014-4021

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows...

2.7 LowFix available

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors.

Exploit likelihood

0.68%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 2.7

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors.

Record: CVE-2014-4021
CVSS 2.0: 2.7 LowAV:A/AC:L/Au:S/C:P/I:N/A:N
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors.

Record: CVE-2014-4021
Updated: 2026-11-02

EUVDEUVD-2014-3953 No score

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors.

Record: EUVD-2014-3953
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h82g-hrcm-j7gq No score

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows...

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors.

Record: GHSA-h82g-hrcm-j7gq
Weakness: CWE-119
Updated: 2026-11-02

OSV No score

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors.

Record: CVE-2014-4021
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-4021 No score

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors.

Record: DEBIAN-CVE-2014-4021
Updated: 2026-11-02

OSVSUSE-SU-2015:0940-1 No score

Security update for Xen

This update fixes the following security issues in Xen:

* CVE-2012-5510: Grant table version switch list corruption
  vulnerability (XSA-26)
* CVE-2012-5511: Several HVM operations do not validate the range of
  their inputs (XSA-27)
* CVE-2012-5513: XENMEM_exchange may overwrite hypervisor memory
  (XSA-29)
* CVE-2012-5514: Missing unlock in
  guest_physmap_mark_populate_on_demand() (XSA-30)
* CVE-2012-5515: Several memory hypercall operations allow invalid
  extent order values (XSA-31)

Also the following fix has been applied:

* bnc#777628 - guest 'disappears' after live migration
  Updated block-dmmd script

Security Issues references:

* CVE-2012-5513
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513>
* CVE-2012-5514
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514>
* CVE-2012-5511
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511>
* CVE-2012-5510
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510>
* CVE-2012-5515
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515>

Record: SUSE-SU-2015:0940-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-4021 No score

Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors.

Record: UBUNTU-CVE-2014-4021
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`xen` Debian:12	before 4.4.1-1	4.4.1-1
`xen` Debian:13	before 4.4.1-1	4.4.1-1
`xen` Debian:14	before 4.4.1-1	4.4.1-1
`xen` Debian:7 From an advisory covering 19 CVEs	before 4.1.4-3+deb7u2, plus listed versions 4.1.4-34.1.4-3+deb7u1	4.1.4-3+deb7u2
`kernel` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-PAE` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-PAE-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-PAE-devel` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-debug` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-debug-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5

Show 28 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-debug-devel` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-debuginfo-common` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-devel` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-doc` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-headers` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-xen` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-xen-debuginfo` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-xen-devel` Red Hat:enterprise_linux:5::client From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-PAE` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-PAE-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-PAE-devel` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-debug` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-debug-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-debug-devel` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-debuginfo-common` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-devel` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-doc` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-headers` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-kdump` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-kdump-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-kdump-devel` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-xen` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-xen-debuginfo` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`kernel-xen-devel` Red Hat:enterprise_linux:5::server From an advisory covering 2 CVEs	before 0:2.6.18-371.11.1.el5	0:2.6.18-371.11.1.el5
`xen` Ubuntu:14.04:LTS	before 4.4.0-0ubuntu5.1, plus listed versions 4.3.0-1ubuntu14.3.0-1ubuntu24.3.0-1ubuntu34.3.0-1ubuntu44.3.0-1ubuntu54.4.0-0ubuntu34.4.0-0ubuntu44.4.0-0ubuntu5	4.4.0-0ubuntu5.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-4021 is a low vulnerability (CVSS 2.7) in Xen, published November 22, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.68%, the 52nd percentile. Fixed in xen 4.4.1-1.

References

Show 61 moreShow less