CVE-2012-5525

Published: Dec 13, 2012Modified: Apr 29, 2026

4.7

Vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 3.4 / Impact: 6.9

Source: NVD

Description

The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read.

Affected (1)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 4.2.0

References (14)

http://secunia.com/advisories/51397

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/55082

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-201309-24.xml

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/12/03/6

Source: secalert@redhat.com

http://www.osvdb.org/88133

Source: secalert@redhat.com

http://www.securityfocus.com/bid/56805

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/80480

Source: secalert@redhat.com

http://secunia.com/advisories/51397