Lucene search
Ubuntu.comUB:CVE-2012-4537HistoryNov 21, 2012 - 12:00 a.m.
CVE-2012-4537
2012-11-2100:00:00
ubuntu.com
ubuntu.com
7
0.001 Low
EPSS
Percentile
27.7%
Xen 3.4 through 4.2, and possibly earlier versions, does not properly
synchronize the p2m and m2p tables when the set_p2m_entry function fails,
which allows local HVM guest OS administrators to cause a denial of service
(memory consumption and assertion failure), aka “Memory mapping failure DoS
vulnerability.”
Notes
| Author | Note |
|---|---|
| kees | for full-virtualization issues, add qemu (and kvm) |
References
lists.xen.org/archives/html/xen-announce/2012-11/msg00005.html
osvdb.org/87307
www.openwall.com/lists/oss-security/2012/11/13/6
www.securitytracker.com/id?1027761
xforce.iss.net/xforce/xfdb/80024
launchpad.net/bugs/cve/CVE-2012-4537
nvd.nist.gov/vuln/detail/CVE-2012-4537
security-tracker.debian.org/tracker/CVE-2012-4537
www.cve.org/CVERecord?id=CVE-2012-4537
Related
debiancve
debiancve
CVE-2012-4537
2012-11-21 23:55:00
cvelist
cvelist
CVE-2012-4537
2012-11-21 23:00:00
cve
cve
CVE-2012-4537
2012-11-21 23:55:00
prion
prion
Information disclosure
2012-11-21 23:55:00
nessus
nessus
OracleVM 2.2 : xen (OVMSA-2012-0049)
2014-11-26 00:00:00
Fedora 18 : xen-4.2.0-4.fc18 (2012-18146)
2012-11-26 00:00:00
Fedora 16 : xen-4.1.3-4.fc16 (2012-18249)
2012-11-23 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: xen-4.2.0-4.fc18
2012-11-23 07:20:59
[SECURITY] Fedora 17 Update: xen-4.1.3-6.fc17
2012-11-23 02:59:27
[SECURITY] Fedora 16 Update: xen-4.1.3-4.fc16
2012-11-23 02:55:52
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2012-12-04 00:00:00
1
2012-12-05 00:00:00
openvas
openvas
RedHat Update for kernel RHSA-2012:1540-01
2012-12-06 00:00:00
Oracle: Security Advisory (ELSA-2012-1540-1)
2015-10-06 00:00:00
RedHat Update for kernel RHSA-2012:1540-01
2012-12-06 00:00:00
redhat
redhat
(RHSA-2012:1540) Important: kernel security, bug fix, and enhancement update
2012-12-04 00:00:00
centos
centos
kernel security update
2012-12-05 10:07:09
suse
suse
Security update for Xen (important)
2012-11-16 00:09:20
Security update for Xen (important)
2012-11-16 17:08:43
xen to fix various denial of service issues (important)
2012-12-23 20:16:24
osv
osv
xen - denial of service
2012-12-07 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2582-1] xen security update
2012-12-09 00:00:00
xen multiple security vulnerabilities
2012-12-09 00:00:00
debian
debian
[SECURITY] [DSA 2582-1] xen security update
2012-12-07 15:41:21
gentoo
gentoo
Xen: Multiple vulnerabilities
2016-04-05 00:00:00
Xen: Multiple vulnerabilities
2013-09-27 00:00:00