2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
26.4%
CentOS Errata and Security Advisory CESA-2013:0241
The xen packages contain administration tools and the xend service for
managing the kernel-xen kernel for virtualization on Red Hat Enterprise
Linux.
A flaw was found in the way libxc, the Xen control library, handled
excessively large kernel and ramdisk images when starting new guests. A
privileged guest user in a para-virtualized guest (a DomU) could create a
crafted kernel or ramdisk image that, when attempting to use it during
guest start, could result in an out-of-memory condition in the privileged
domain (the Dom0). (CVE-2012-4544)
Red Hat would like to thank the Xen project for reporting this issue.
All users of xen are advised to upgrade to these updated packages, which
correct this issue. After installing the updated packages, the xend service
must be restarted for this update to take effect.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2013-February/081392.html
Affected packages:
xen
xen-devel
xen-libs
Upstream details at:
https://access.redhat.com/errata/RHSA-2013:0241
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 5 | i386 | xen | < 3.0.3-142.el5_9.1 | xen-3.0.3-142.el5_9.1.i386.rpm |
CentOS | 5 | i386 | xen-devel | < 3.0.3-142.el5_9.1 | xen-devel-3.0.3-142.el5_9.1.i386.rpm |
CentOS | 5 | i386 | xen-libs | < 3.0.3-142.el5_9.1 | xen-libs-3.0.3-142.el5_9.1.i386.rpm |
CentOS | 5 | x86_64 | xen | < 3.0.3-142.el5_9.1 | xen-3.0.3-142.el5_9.1.x86_64.rpm |
CentOS | 5 | i386 | xen-devel | < 3.0.3-142.el5_9.1 | xen-devel-3.0.3-142.el5_9.1.i386.rpm |
CentOS | 5 | x86_64 | xen-devel | < 3.0.3-142.el5_9.1 | xen-devel-3.0.3-142.el5_9.1.x86_64.rpm |
CentOS | 5 | i386 | xen-libs | < 3.0.3-142.el5_9.1 | xen-libs-3.0.3-142.el5_9.1.i386.rpm |
CentOS | 5 | x86_64 | xen-libs | < 3.0.3-142.el5_9.1 | xen-libs-3.0.3-142.el5_9.1.x86_64.rpm |