CVEvulnerability
CVE-2012-6033
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-11-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest OS users to access control stack operations via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
Affected configurations
• xen xen 4.0.0
• xen xen 4.1.0
• xen xen 4.2.0
Related
Weakness · not in database (1)
References
- http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html Vendor Advisory
- http://osvdb.org/85199 osvdb.org
- http://secunia.com/advisories/50472 Vendor Advisory
- http://secunia.com/advisories/55082 secunia.com
- http://security.gentoo.org/glsa/glsa-201309-24.xml security.gentoo.org
- http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities wiki.xen.org
- http://www.openwall.com/lists/oss-security/2012/09/05/8 www.openwall.com
- http://www.securityfocus.com/bid/55410 www.securityfocus.com
- http://www.securitytracker.com/id?1027482 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78268 exchange.xforce.ibmcloud.com
- https://security.gentoo.org/glsa/201604-03 security.gentoo.org
- http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html Vendor Advisory
- http://osvdb.org/85199 osvdb.org
- http://secunia.com/advisories/50472 Vendor Advisory
- http://secunia.com/advisories/55082 secunia.com
- http://security.gentoo.org/glsa/glsa-201309-24.xml security.gentoo.org
- http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities wiki.xen.org
- http://www.openwall.com/lists/oss-security/2012/09/05/8 www.openwall.com
- http://www.securityfocus.com/bid/55410 www.securityfocus.com
- http://www.securitytracker.com/id?1027482 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78268 exchange.xforce.ibmcloud.com
- https://security.gentoo.org/glsa/201604-03 security.gentoo.org