PT-2012-4780 · Citrix+1 · Xen+2

Published 2012-11-23 · Updated 2013-02-01 · CVE-2012-3516

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.2 Citrix XenServer version 6.0.2

Description The issue allows local guest kernels or administrators to cause a denial of service, potentially leading to a host crash, and possibly gain privileges. This is achieved by crafting a grant reference that triggers a write to an arbitrary hypervisor memory location through the GNTTABOP swap grant ref sub-operation in the grant table hypercall.

Recommendations For Xen version 4.2, update to a version that includes a fix for this issue. For Citrix XenServer version 6.0.2, apply the recommended patch or update to a newer version that addresses this problem.

Fix

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-3516

Affected Products

Suse

Xen

Xenserver

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2012-3516 · Security Note
• http://secunia.com/advisories/50472 · Vendor Advisory
• http://support.citrix.com/article/CTX134708 · Vendor Advisory
• http://secunia.com/advisories/50530 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html · Vendor Advisory
• http://wiki.xen.org/wiki/Security_Announcements#XSA-18_grant_table_entry_swaps_have_inadequate_bounds_checking · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3516 · Note
• http://securityfocus.com/bid/55411 · Note
• http://openwall.com/lists/oss-security/2012/09/05/11 · Note