Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-3432
HistoryDec 03, 2012 - 12:00 a.m.

CVE-2012-3432

2012-12-0300:00:00
ubuntu.com
ubuntu.com
10

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

45.4%

The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations
emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly
reset certain state information between emulation cycles, which allows
local guest OS users to cause a denial of service (guest OS crash) via
unspecified operations on MMIO regions.

Notes

Author Note
tyhicks xen-3.3 and later are vulnerable
mdeslaur This is XSA-10
OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchxen< 4.1.1-2ubuntu4.4UNKNOWN
ubuntu12.04noarchxen< 4.1.2-2ubuntu2.4UNKNOWN

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

45.4%