CVE-2012-5510
CVE-2012-5510
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.
EPSS 0,4% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
xen Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 4.1.3-5
Mettez à jour vers 4.1.3-5
xen Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 4.1.3-5
Mettez à jour vers 4.1.3-5
xen Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 4.1.3-5
Mettez à jour vers 4.1.3-5
Sources originales
- http://www.openwall.com/lists/oss-security/2012/12/03/6
- http://secunia.com/advisories/55082
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
- http://support.citrix.com/article/CTX135777
- http://security.gentoo.org/glsa/glsa-201309-24.xml
- http://www.debian.org/security/2012/dsa-2582
- http://secunia.com/advisories/51397
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html
- http://secunia.com/advisories/51486
- http://secunia.com/advisories/51487
- http://www.securityfocus.com/bid/56794
- http://secunia.com/advisories/51468
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
- http://www.osvdb.org/88128
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80478
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
- https://nvd.nist.gov/vuln/detail/CVE-2012-5510