PT-2012-4780 · Citrix+1 · Xen+2

Publicado 2012-11-23 · Atualizado 2013-02-01 · CVE-2012-3516

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.2 Citrix XenServer version 6.0.2

Description The issue allows local guest kernels or administrators to cause a denial of service, potentially leading to a host crash, and possibly gain privileges. This is achieved by crafting a grant reference that triggers a write to an arbitrary hypervisor memory location through the GNTTABOP swap grant ref sub-operation in the grant table hypercall.

Recommendations For Xen version 4.2, update to a version that includes a fix for this issue. For Citrix XenServer version 6.0.2, apply the recommended patch or update to a newer version that addresses this problem.

Correção

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-3516

Produtos afetados

Suse

Xen

Xenserver

Referências · 9

• http://wiki.xen.org/wiki/Security_Announcements#XSA-18_grant_table_entry_swaps_have_inadequate_bounds_checking · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3516 · Nota de Segurança
• http://secunia.com/advisories/50472 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3516 · Nota
• http://support.citrix.com/article/CTX134708 · Aviso do Fabricante
• http://secunia.com/advisories/50530 · Aviso do Fabricante
• http://securityfocus.com/bid/55411 · Nota
• http://openwall.com/lists/oss-security/2012/09/05/11 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html · Aviso do Fabricante