CVE-2012-4537

Published: Nov 21, 2012Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability."

Affected (15)

Products: Xen: Xen

1 product

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 3.4.0
Xen Xen	Version 3.4.1
Xen Xen	Version 3.4.2
Xen Xen	Version 3.4.3
Xen Xen	Version 3.4.4
Xen Xen	Version 4.0.0
Xen Xen	Version 4.0.1
Xen Xen	Version 4.0.2
Xen Xen	Version 4.0.3
Xen Xen	Version 4.0.4
Xen Xen	Version 4.1.0
Xen Xen	Version 4.1.1
Xen Xen	Version 4.1.2
Xen Xen	Version 4.1.3
Xen Xen	Version 4.2.0

Related CWEs

References (46)

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html

Source: secalert@redhat.com

http://lists.xen.org/archives/html/xen-announce/2012-11/msg00005.html

Source: secalert@redhat.com

Vendor Advisory

http://osvdb.org/87307

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2012-1540.html

Source: secalert@redhat.com

http://secunia.com/advisories/51200

Source: secalert@redhat.com

http://secunia.com/advisories/51324

Source: secalert@redhat.com

http://secunia.com/advisories/51352

Source: secalert@redhat.com

http://secunia.com/advisories/51413

Source: secalert@redhat.com

http://secunia.com/advisories/51468

Source: secalert@redhat.com

http://secunia.com/advisories/55082

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2582

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/11/13/6

Source: secalert@redhat.com

http://www.securityfocus.com/bid/56498

Source: secalert@redhat.com

http://www.securitytracker.com/id?1027761

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/80024

Source: secalert@redhat.com

https://security.gentoo.org/glsa/201604-03

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.xen.org/archives/html/xen-announce/2012-11/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://osvdb.org/87307

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2012-1540.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51200

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51324

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51352

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51413

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51468

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/55082

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2582

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/11/13/6

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/56498

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1027761

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/80024

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201604-03

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.