CVE-2012-4535

Published: Nov 21, 2012Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline."

Affected (15)

Products: Xen: Xen

1 product

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 3.4.0
Xen Xen	Version 3.4.1
Xen Xen	Version 3.4.2
Xen Xen	Version 3.4.3
Xen Xen	Version 3.4.4
Xen Xen	Version 4.0.0
Xen Xen	Version 4.0.1
Xen Xen	Version 4.0.2
Xen Xen	Version 4.0.3
Xen Xen	Version 4.0.4
Xen Xen	Version 4.1.0
Xen Xen	Version 4.1.1
Xen Xen	Version 4.1.2
Xen Xen	Version 4.1.3
Xen Xen	Version 4.2.0

Related CWEs

References (46)

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html

Source: secalert@redhat.com

http://lists.xen.org/archives/html/xen-announce/2012-11/msg00001.html

Source: secalert@redhat.com

Vendor Advisory

http://osvdb.org/87298

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2012-1540.html

Source: secalert@redhat.com

http://secunia.com/advisories/51200

Source: secalert@redhat.com

http://secunia.com/advisories/51324

Source: secalert@redhat.com

http://secunia.com/advisories/51352

Source: secalert@redhat.com

http://secunia.com/advisories/51413

Source: secalert@redhat.com

http://secunia.com/advisories/51468

Source: secalert@redhat.com

http://secunia.com/advisories/55082

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2582

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/11/13/1

Source: secalert@redhat.com

http://www.securityfocus.com/bid/56498

Source: secalert@redhat.com

http://www.securitytracker.com/id?1027759

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/80022

Source: secalert@redhat.com

https://security.gentoo.org/glsa/201604-03

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.xen.org/archives/html/xen-announce/2012-11/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://osvdb.org/87298

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2012-1540.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51200

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51324

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51352

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51413

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51468

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/55082

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2582

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/11/13/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/56498

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1027759

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/80022

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201604-03

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.