Xen contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when an error occurs in the VNC graphical display during the handling of a certain key sequence. This may allow a local attacker to gain escalated privileges.
Local Access Required
Loss of Integrity
It has been reported that this issue has been fixed. Upgrade to version 4.1.4, 4.2.0, or higher, to address this vulnerability.