CVE-2012-4537
CVE-2012-4537
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability."
EPSS 0,4% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
xen Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.1.3-4
Actualiza a 4.1.3-4
xen Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.1.3-4
Actualiza a 4.1.3-4
xen Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 4.1.3-4
Actualiza a 4.1.3-4
Fuentes originales
- http://rhn.redhat.com/errata/RHSA-2012-1540.html
- http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html
- http://secunia.com/advisories/55082
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80024
- http://www.openwall.com/lists/oss-security/2012/11/13/6
- http://secunia.com/advisories/51413
- http://secunia.com/advisories/51200
- http://security.gentoo.org/glsa/glsa-201309-24.xml
- http://www.debian.org/security/2012/dsa-2582
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html
- http://lists.xen.org/archives/html/xen-announce/2012-11/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
- http://secunia.com/advisories/51468
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
- http://secunia.com/advisories/51352
- http://secunia.com/advisories/51324
- https://security.gentoo.org/glsa/201604-03
- http://www.securityfocus.com/bid/56498
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
- http://osvdb.org/87307
- http://www.securitytracker.com/id?1027761
- https://nvd.nist.gov/vuln/detail/CVE-2012-4537