DEBIAN-CVE-2012-3495

The physdevgetfreepirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the getfreepirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service invali...

Design/Logic Flaw

The physdevgetfreepirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the getfreepirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service invali...

CVE-2012-3495

The physdevgetfreepirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the getfreepirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service invali...

XenSource Xen 'physdev_get_free_pirq'拒绝服务漏洞

BUGTRAQ ID: 55406 CVE ID: CVE-2012-3495 Xen是一个开放源代码虚拟机监视器，由剑桥大学开发。 Xen 4.1及其他版本在实现上存在本地拒绝服务漏洞，对客户端操作系统有访问权限的攻击者可利用此漏洞使主机操作系统崩溃。 0 XenSource Xen 4.x XenSource Xen 3.x 厂商补丁： XenSource --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://xen.xensource.com/...