CVE Vulnerabilities

CVE-2012-3433

Published: Nov 24, 2012 | Modified: Oct 11, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.9 MEDIUM
AV:L/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
5.5 IMPORTANT
AV:A/AC:L/Au:S/C:N/I:N/A:C
RedHat/V3
Ubuntu
MEDIUM

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.

Affected Software

Name Vendor Start Version End Version
Xen Xen 4.0.0 (including) 4.0.0 (including)
Xen Xen 4.1.0 (including) 4.1.0 (including)
Xen Ubuntu oneiric *
Xen Ubuntu precise *
Xen Ubuntu upstream *

References