CVE-2012-5511

Published: Dec 13, 2012Modified: Apr 29, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image.

Affected (11)

Products: Xen: Xen

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 3.4.0
Xen Xen	Version 3.4.1
Xen Xen	Version 3.4.2
Xen Xen	Version 3.4.3
Xen Xen	Version 3.4.4
Xen Xen	Version 4.0.0
Xen Xen	Version 4.0.1
Xen Xen	Version 4.0.2
Xen Xen	Version 4.0.3
Xen Xen	Version 4.0.4
Xen Xen	Version 4.1.0

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (36)

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html

Source: secalert@redhat.com

http://secunia.com/advisories/51397

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/51486

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/51487

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/55082

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: secalert@redhat.com

http://support.citrix.com/article/CTX135777

Source: secalert@redhat.com

http://www.debian.org/security/2013/dsa-2636

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/12/03/10

Source: secalert@redhat.com

http://www.osvdb.org/88129

Source: secalert@redhat.com

http://www.securityfocus.com/bid/56796

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/80484

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51397

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/51486

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/51487

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/55082

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.citrix.com/article/CTX135777

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2013/dsa-2636

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/12/03/10

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/88129

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/56796

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/80484

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.