CVE-2014-3559 | BDVDB-2026-63013 Detail

Description#

The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots when deleting a VM, even when wipe-after-delete (WAD) is configured for the VM's disk, which allows remote authenticated users with certain credentials to read portions of the deleted VM's memory and obtain sensitive information via an uninitialized storage volume.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1030664
https://exchange.xforce.ibmcloud.com/vulnerabilities/95098
http://rhn.redhat.com/errata/RHSA-2014-1002.html
https://bugzilla.redhat.com/show_bug.cgi?id=1121925

Exploit#

No public exploit known

History#

Version 12014-08-06Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.