Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-5514
HistoryDec 13, 2012 - 11:53 a.m.

CVE-2012-5514

2012-12-1311:53:49
[email protected]
web.nvd.nist.gov
37
xen
4.2
guest_physmap_mark
denial of service
cve-2012-5514
security vulnerability

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

3.6 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.1%

JSON

The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors.

Affected configurations

NVD
Node
xenxenRange≤4.2.0
OR
xenxenMatch3.0.2
OR
xenxenMatch3.0.3
OR
xenxenMatch3.0.4
OR
xenxenMatch3.1.3
OR
xenxenMatch3.1.4
OR
xenxenMatch3.2.0
OR
xenxenMatch3.2.1
OR
xenxenMatch3.2.2
OR
xenxenMatch3.2.3
OR
xenxenMatch3.3.0
OR
xenxenMatch3.3.1
OR
xenxenMatch3.3.2
OR
xenxenMatch3.4.0
OR
xenxenMatch3.4.1
OR
xenxenMatch3.4.2
OR
xenxenMatch3.4.3
OR
xenxenMatch3.4.4
OR
xenxenMatch4.0.0
OR
xenxenMatch4.0.1
OR
xenxenMatch4.0.2
OR
xenxenMatch4.0.3
OR
xenxenMatch4.0.4
OR
xenxenMatch4.1.0
OR
xenxenMatch4.1.1
OR
xenxenMatch4.1.2
OR
xenxenMatch4.1.3

References

Related

ubuntucve 1
nvd 1
prion 1
xen 1
debiancve 1
cvelist 1
nessus 17
fedora 15
suse 5
osv 1
securityvulns 2
openvas 38
debian 1
gentoo 1
ubuntucve
ubuntucve
CVE-2012-5514
2012-12-13 00:00:00
nvd
nvd
CVE-2012-5514
2012-12-13 11:53:49
prion
prion
Command injection
2012-12-13 11:53:00
xen
xen
Broken error handling in guest_physmap_mark_populate_on_demand()
2012-12-03 17:51:00
debiancve
debiancve
CVE-2012-5514
2012-12-13 11:53:49
cvelist
cvelist
CVE-2012-5514
2012-12-13 11:00:00
nessus
nessus
OracleVM 2.2 : xen (OVMSA-2012-0058)
2014-11-26 00:00:00
OracleVM 3.0 : xen (OVMSA-2012-0056)
2014-11-26 00:00:00
Fedora 17 : xen-4.1.3-7.fc17 (2012-19717)
2012-12-13 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: xen-4.2.0-6.fc18
2012-12-12 00:16:38
[SECURITY] Fedora 17 Update: xen-4.1.4-2.fc17
2013-01-23 01:28:58
[SECURITY] Fedora 16 Update: xen-4.1.3-6.fc16
2012-12-15 17:56:31
suse
suse
xen to fix various denial of service issues (important)
2013-01-23 14:05:00
xen to fix various denial of service issues (important)
2012-12-23 20:16:24
xen to fix various denial of service issues (important)
2012-12-23 20:08:36
osv
osv
xen - denial of service
2012-12-07 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2582-1] xen security update
2012-12-09 00:00:00
xen multiple security vulnerabilities
2012-12-09 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2582-1)
2013-09-18 00:00:00
SuSE Update for xen openSUSE-SU-2012:1687-1 (xen)
2013-03-11 00:00:00
Debian Security Advisory DSA 2582-1 (xen - several vulnerabilities)
2013-09-18 00:00:00
debian
debian
[SECURITY] [DSA 2582-1] xen security update
2012-12-07 15:40:44
gentoo
gentoo
Xen: Multiple vulnerabilities
2013-09-27 00:00:00

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

3.6 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.1%

JSON
Related for CVE-2012-5514
ubuntucve1nvd1prion1xen1debiancve1cvelist1nessus17fedora15suse5osv1securityvulns2openvas38debian1gentoo1