CVE-2012-5513

Published: Dec 13, 2012Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range.

Affected (27)

Products: Xen: Xen

1 product

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Up to 4.2.0
Xen Xen	Version 3.0.2
Xen Xen	Version 3.0.3
Xen Xen	Version 3.0.4
Xen Xen	Version 3.1.3
Xen Xen	Version 3.1.4
Xen Xen	Version 3.2.0
Xen Xen	Version 3.2.1
Xen Xen	Version 3.2.2
Xen Xen	Version 3.2.3
Xen Xen	Version 3.3.0
Xen Xen	Version 3.3.1
Xen Xen	Version 3.3.2
Xen Xen	Version 3.4.0
Xen Xen	Version 3.4.1
Xen Xen	Version 3.4.2
Xen Xen	Version 3.4.3
Xen Xen	Version 3.4.4
Xen Xen	Version 4.0.0
Xen Xen	Version 4.0.1
Xen Xen	Version 4.0.2
Xen Xen	Version 4.0.3
Xen Xen	Version 4.0.4
Xen Xen	Version 4.1.0
Xen Xen	Version 4.1.1
Xen Xen	Version 4.1.2
Xen Xen	Version 4.1.3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (46)

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00000.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2012-1540.html

Source: secalert@redhat.com

http://secunia.com/advisories/51397

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/51468

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/51486

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/51487

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/51495

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/55082

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: secalert@redhat.com

http://support.citrix.com/article/CTX135777

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2582

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/12/03/11

Source: secalert@redhat.com

http://www.osvdb.org/88131

Source: secalert@redhat.com

http://www.securityfocus.com/bid/56797

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/80482

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2012-1540.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51397

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/51468

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/51486

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/51487

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/51495

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/55082

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.citrix.com/article/CTX135777

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2582

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/12/03/11

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/88131

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/56797

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/80482

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.