PT-2012-4759 · Citrix+1 · Xenserver+2

Publicado

2012-09-06

·

Atualizado

2017-08-29

·

CVE-2012-3494

CVSS v2.0

2.1

Baixa

VetorAV:L/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Xen versions 4.0 through 4.2 Citrix XenServer version 6.0.2 and earlier
Description The issue allows local OS guest users to cause a denial of service by writing to the reserved bits of the DR7 debug control register. This is possible through the set debugreg hypercall in include/asm-x86/debugreg.h when running on x86-64 systems.
Recommendations For Xen versions 4.0 through 4.2, consider restricting access to the set debugreg hypercall to prevent local OS guest users from causing a denial of service. For Citrix XenServer version 6.0.2 and earlier, restrict access to the set debugreg hypercall in include/asm-x86/debugreg.h to minimize the risk of exploitation.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-3494
DSA-2544-1
OPENSUSE-SU-2012_1172-1
OPENSUSE-SU-2012_1174-1
OPENSUSE-SU-2012_1572-1
OPENSUSE-SU-2012_1573-1
SUSE-SU-2012_1129-1
SUSE-SU-2012_1132-1
SUSE-SU-2012_1133-1
SUSE-SU-2012_1162-1

Produtos afetados

Suse
Xen
Xenserver