CVE-2012-5514

Published: Dec 13, 2012Modified: Apr 29, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors.

Affected (27)

Products: Xen: Xen

1 product

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Up to 4.2.0
Xen Xen	Version 3.0.2
Xen Xen	Version 3.0.3
Xen Xen	Version 3.0.4
Xen Xen	Version 3.1.3
Xen Xen	Version 3.1.4
Xen Xen	Version 3.2.0
Xen Xen	Version 3.2.1
Xen Xen	Version 3.2.2
Xen Xen	Version 3.2.3
Xen Xen	Version 3.3.0
Xen Xen	Version 3.3.1
Xen Xen	Version 3.3.2
Xen Xen	Version 3.4.0
Xen Xen	Version 3.4.1
Xen Xen	Version 3.4.2
Xen Xen	Version 3.4.3
Xen Xen	Version 3.4.4
Xen Xen	Version 4.0.0
Xen Xen	Version 4.0.1
Xen Xen	Version 4.0.2
Xen Xen	Version 4.0.3
Xen Xen	Version 4.0.4
Xen Xen	Version 4.1.0
Xen Xen	Version 4.1.1
Xen Xen	Version 4.1.2
Xen Xen	Version 4.1.3

References (38)

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html

Source: secalert@redhat.com

http://secunia.com/advisories/51397

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/51468

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/51486

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/51487

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/55082

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: secalert@redhat.com

http://support.citrix.com/article/CTX135777

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2582

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/12/03/12

Source: secalert@redhat.com

http://www.osvdb.org/88130

Source: secalert@redhat.com

http://www.securityfocus.com/bid/56803

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/80483

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/51397

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/51468

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/51486

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/51487

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/55082

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.citrix.com/article/CTX135777

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2582

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/12/03/12

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/88130

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/56803

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/80483

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.