Configuration in Xen



| Updated: 2020-07-28
Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2012-3496
CWE-ID CWE-16
Exploitation vector Local
Public exploit N/A
Vulnerable software
 Xen
Server applications / Virtualization software

Vendor Xen Project

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Configuration

EUVDB-ID: #VU32742

Risk: Low

CVSSv4.0: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2012-3496

CWE-ID: CWE-16 - Configuration

Exploit availability: No

Description

The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.

XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Xen: 4.24

CPE2.3 External links

https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html
https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
https://lists.xen.org/archives/html/xen-announce/2012-09/msg00002.html
https://secunia.com/advisories/50472
https://secunia.com/advisories/50530
https://secunia.com/advisories/51413
https://secunia.com/advisories/55082
https://security.gentoo.org/glsa/glsa-201309-24.xml
https://securitytracker.com/id?1027481
https://support.citrix.com/article/CTX134708
https://wiki.xen.org/wiki/Security_Announcements#XSA-14_XENMEM_populate_physmap_DoS_vulnerability
https://www.debian.org/security/2012/dsa-2544
https://www.openwall.com/lists/oss-security/2012/09/05/7
https://www.osvdb.org/85200
https://www.securityfocus.com/bid/55412
https://bugzilla.redhat.com/show_bug.cgi?id=854590
https://exchange.xforce.ibmcloud.com/vulnerabilities/78267
https://security.gentoo.org/glsa/201604-03


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###