CVE-2012-4538

Published: Nov 24, 2012Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.

Affected (3)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 4.0.0
Xen Xen	Version 4.1.0
Xen Xen	Version 4.2.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (42)

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: secalert@redhat.com

http://lists.xen.org/archives/html/xen-announce/2012-11/msg00004.html

Source: secalert@redhat.com

Vendor Advisory

http://osvdb.org/87306

Source: secalert@redhat.com

http://secunia.com/advisories/51200

Source: secalert@redhat.com

http://secunia.com/advisories/51324

Source: secalert@redhat.com

http://secunia.com/advisories/51352

Source: secalert@redhat.com

http://secunia.com/advisories/51413

Source: secalert@redhat.com

http://secunia.com/advisories/51468

Source: secalert@redhat.com

http://secunia.com/advisories/55082

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2582

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/11/13/3

Source: secalert@redhat.com

http://www.securityfocus.com/bid/56498

Source: secalert@redhat.com

http://www.securitytracker.com/id?1027762

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/80025

Source: secalert@redhat.com

https://security.gentoo.org/glsa/201604-03

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html