Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2012-2934
HistoryDec 03, 2012 - 9:55 p.m.

CVE-2012-2934

2012-12-0321:55:00
Debian Security Bug Tracker
security-tracker.debian.org
17

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

34.6%

Xen 4.0, and 4.1, when running a 64-bit PV guest on “older” AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a denial of service (host hang) via sequential execution of instructions across a non-canonical boundary, a different vulnerability than CVE-2012-0217.

OSVersionArchitecturePackageVersionFilename
Debian12allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb
Debian11allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb
Debian10allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb
Debian999allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb
Debian13allxen< 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1xen_4.1.3~rc1+hg-20120614.a9c0a89c08f2-1_all.deb

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

34.6%