CVEvulnerability
CVE-2012-5510
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-12-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
Description
Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.
Affected configurations
• xen xen 4.0.0
• xen xen 4.0.1
• xen xen 4.0.2
• xen xen 4.0.3
• xen xen 4.0.4
• xen xen 4.1.0
• xen xen 4.1.1
• xen xen 4.1.2
• xen xen 4.1.3
• xen xen 4.2.0
References
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html lists.opensuse.org
- http://secunia.com/advisories/51397 Vendor Advisory
- http://secunia.com/advisories/51468 Vendor Advisory
- http://secunia.com/advisories/51486 Vendor Advisory
- http://secunia.com/advisories/51487 Vendor Advisory
- http://secunia.com/advisories/55082 secunia.com
- http://security.gentoo.org/glsa/glsa-201309-24.xml security.gentoo.org
- http://support.citrix.com/article/CTX135777 support.citrix.com
- http://www.debian.org/security/2012/dsa-2582 www.debian.org
- http://www.openwall.com/lists/oss-security/2012/12/03/6 www.openwall.com
- http://www.osvdb.org/88128 www.osvdb.org
- http://www.securityfocus.com/bid/56794 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80478 exchange.xforce.ibmcloud.com
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html lists.opensuse.org
- http://secunia.com/advisories/51397 Vendor Advisory
- http://secunia.com/advisories/51468 Vendor Advisory
- http://secunia.com/advisories/51486 Vendor Advisory
- http://secunia.com/advisories/51487 Vendor Advisory
- http://secunia.com/advisories/55082 secunia.com
- http://security.gentoo.org/glsa/glsa-201309-24.xml security.gentoo.org
- http://support.citrix.com/article/CTX135777 support.citrix.com
- http://www.debian.org/security/2012/dsa-2582 www.debian.org
- http://www.openwall.com/lists/oss-security/2012/12/03/6 www.openwall.com
- http://www.osvdb.org/88128 www.osvdb.org
- http://www.securityfocus.com/bid/56794 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80478 exchange.xforce.ibmcloud.com