CVE-2012-4537
CVE-2012-4537
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability."
EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://rhn.redhat.com/errata/RHSA-2012-1540.html
- http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html
- http://secunia.com/advisories/55082
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80024
- http://www.openwall.com/lists/oss-security/2012/11/13/6
- http://secunia.com/advisories/51413
- http://secunia.com/advisories/51200
- http://security.gentoo.org/glsa/glsa-201309-24.xml
- http://www.debian.org/security/2012/dsa-2582
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html
- http://lists.xen.org/archives/html/xen-announce/2012-11/msg00005.html
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
- http://secunia.com/advisories/51468
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
- http://secunia.com/advisories/51352
- http://secunia.com/advisories/51324
- https://security.gentoo.org/glsa/201604-03
- http://www.securityfocus.com/bid/56498
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
- http://osvdb.org/87307
- http://www.securitytracker.com/id?1027761
- https://nvd.nist.gov/vuln/detail/CVE-2012-4537