CVEvulnerability
CVE-2012-3432
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-12-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-264
Description
The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions.
Affected configurations
• xen xen 3.3.0
• xen xen 4.0.0
• xen xen 4.0.1
• xen xen 4.0.2
• xen xen 4.0.3
• xen xen 4.0.4
• xen xen 4.1.0
• xen xen 4.1.1
• xen xen 4.1.2
• xen xen 4.1.3
• xen xen 4.2.0
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00024.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html lists.opensuse.org
- http://lists.xen.org/archives/html/xen-devel/2012-07/msg01649.html Exploit, Vendor Advisory
- http://secunia.com/advisories/55082 secunia.com
- http://security.gentoo.org/glsa/glsa-201309-24.xml security.gentoo.org
- http://www.debian.org/security/2012/dsa-2531 www.debian.org
- http://www.securityfocus.com/bid/54691 www.securityfocus.com
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00024.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html lists.opensuse.org
- http://lists.xen.org/archives/html/xen-devel/2012-07/msg01649.html Exploit, Vendor Advisory
- http://secunia.com/advisories/55082 secunia.com
- http://security.gentoo.org/glsa/glsa-201309-24.xml security.gentoo.org
- http://www.debian.org/security/2012/dsa-2531 www.debian.org
- http://www.securityfocus.com/bid/54691 www.securityfocus.com