Lucene search

PRIOn knowledge basePRION:CVE-2012-5634

HistoryFeb 14, 2013 - 10:55 p.m.

Design/Logic Flaw

2013-02-1422:55:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.2%

JSON

Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt.

CPENameOperatorVersion
xeneq4.1.2
xeneq4.0.0
xeneq4.1.1
xeneq4.2.0
xeneq4.1.0
xeneq4.1.3
xeneq4.1.4
xeneq4.2.1

Name	Operator	Version
xen	eq	4.1.2
xen	eq	4.0.0
xen	eq	4.1.1
xen	eq	4.2.0
xen	eq	4.1.0
xen	eq	4.1.3
xen	eq	4.1.4
xen	eq	4.2.1

References

lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

lists.opensuse.org/opensuse-updates/2013-04/msg00051.html

lists.opensuse.org/opensuse-updates/2013-04/msg00052.html

lists.opensuse.org/opensuse-updates/2013-06/msg00049.html

secunia.com/advisories/55082

security.gentoo.org/glsa/glsa-201309-24.xml

www.debian.org/security/2013/dsa-2636

www.openwall.com/lists/oss-security/2013/01/09/5