PT-2012-4761 · Xen+2 · Xen+2

Petr Matousek · Published 2012-09-14 · Updated 2017-08-29 · CVE-2012-3496

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.0 through 4.2 Citrix XenServer version 6.0.2 and earlier

Description The issue allows local PV OS guest kernels to cause a denial of service, resulting in a host crash, by triggering a BUG when invalid flags such as MEMF populate on demand are used. This occurs when translating paging mode is not used.

Recommendations For Xen versions 4.0 through 4.2, consider updating to a version where this issue is resolved to prevent local PV OS guest kernels from causing a denial of service. For Citrix XenServer version 6.0.2 and earlier, consider updating to a version where this issue is resolved to prevent local PV OS guest kernels from causing a denial of service. As a temporary workaround, consider restricting the use of invalid flags such as MEMF populate on demand in the XENMEM populate physmap function until a patch is available.

Fix

DoS

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2012-3496

DSA-2544-1

OPENSUSE-SU-2012_1172-1

OPENSUSE-SU-2012_1174-1

OPENSUSE-SU-2012_1572-1

OPENSUSE-SU-2012_1573-1

Affected Products

Citrix Xenserver

Suse

Xen

References · 77

• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html · Vendor Advisory
• http://lists.xen.org/archives/html/xen-announce/2012-09/msg00002.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-3496 · Vendor Advisory
• https://security.gentoo.org/glsa/201604-03 · Vendor Advisory
• http://secunia.com/advisories/50472 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04588 · Security Note
• https://osv.dev/vulnerability/CVE-2012-3496 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201309-24.xml · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3496 · Vendor Advisory
• http://secunia.com/advisories/50530 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html · Vendor Advisory