Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2012-2934
HistoryDec 03, 2012 - 9:55 p.m.

CVE-2012-2934

2012-12-0321:55:01
Debian Security Bug Tracker
security-tracker.debian.org
17

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

35.5%

Xen 4.0, and 4.1, when running a 64-bit PV guest on “older” AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a denial of service (host hang) via sequential execution of instructions across a non-canonical boundary, a different vulnerability than CVE-2012-0217.

OSVersionArchitecturePackageVersionFilename
Debian12allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb
Debian11allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb
Debian999allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb
Debian13allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

35.5%