PT-2012-5473 · Xen+2 · Xen+2

Publicado 2012-10-31 · Atualizado 2024-06-15 · CVE-2012-4544

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 4.2 and earlier

Description The issue allows local guest administrators to cause a denial of service by consuming domain 0 memory via a crafted kernel or ramdisk, due to the lack of validation of the size of the kernel or ramdisk before or after decompression.

Recommendations For Xen versions 4.2 and earlier, consider implementing size validation for kernels and ramdisks to prevent excessive memory consumption. As a temporary workaround, restrict the ability of local guest administrators to load custom kernels or ramdisks until a proper fix is applied.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-4544

DSA-2636-1

OPENSUSE-SU-2012_1572-1

OPENSUSE-SU-2012_1573-1

OPENSUSE-SU-2024:10196-1

RHSA-2013:0241

RHSA-2013_0241

SUSE-SU-2014_0411-1

Produtos afetados

Red Hat

Suse

Xen

Referências · 219

• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Aviso do Fabricante
• https://bugzilla.novell.com/778105 · Nota
• https://suse.com/security/cve/CVE-2014-3672 · Nota
• https://suse.com/security/cve/CVE-2015-7970 · Nota
• http://support.novell.com/security/cve/CVE-2012-3515.html · Nota
• https://suse.com/security/cve/CVE-2016-2538 · Nota
• https://suse.com/security/cve/CVE-2015-7969 · Nota
• https://suse.com/security/cve/CVE-2015-8615 · Nota
• https://suse.com/security/cve/CVE-2014-5146 · Nota
• https://suse.com/security/cve/CVE-2016-1981 · Nota
• https://bugzilla.novell.com/848657 · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://suse.com/security/cve/CVE-2015-8550 · Nota
• http://support.novell.com/security/cve/CVE-2012-3496.html · Nota