CVE-2014-3559

The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots when deleting a VM, even when wipe-after-delete (WAD) is…

published August 6, 2014

CVSS
—
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots when deleting a VM, even when wipe-after-delete (WAD) is configured for the VM's disk, which allows remote authenticated users with certain credentials to read portions of the deleted VM's memory and obtain sensitive information via an uninitialized storage volume.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01443 · 72.9th percentile
Published
2014-08-06T19:00Z
EPSS history
Timeline
  • 06 AUG 19:00Z
    The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots when deleting a VM, even when wipe-after-delete (WAD) is…
    cvelistv5