CVE-2012-4411

Published: Nov 23, 2012Modified: Apr 29, 2026

4.6

Vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Exploitability: 3.1 / Impact: 6.9

Source: NVD

Description

The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.

Affected (3)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 4.0.0
Xen Xen	Version 4.1.0
Xen Xen	Version 4.2.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (38)

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: secalert@redhat.com

http://lists.xen.org/archives/html/xen-announce/2012-09/msg00007.html

Source: secalert@redhat.com

http://lists.xen.org/archives/html/xen-announce/2012-09/msg00008.html

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/50493

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/51324

Source: secalert@redhat.com

http://secunia.com/advisories/51352

Source: secalert@redhat.com

http://secunia.com/advisories/51413

Source: secalert@redhat.com

http://secunia.com/advisories/55082

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2543

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/09/06/2

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/09/06/7

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/09/07/5

Source: secalert@redhat.com

http://www.securityfocus.com/bid/55442

Source: secalert@redhat.com

https://security.gentoo.org/glsa/201604-03

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html