Input validation error in Xen



| Updated: 2020-07-28
Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2012-3498
CWE-ID CWE-20
Exploitation vector Local
Public exploit N/A
Vulnerable software
 Xen
Server applications / Virtualization software

Vendor Xen Project

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Input validation error

EUVDB-ID: #VU32744

Risk: Low

CVSSv4.0: 4.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2012-3498

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local non-authenticated attacker to #BASIC_IMPACT#.

PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service (host crash) and possibly read hypervisor or guest memory via vectors related to a missing range check of map->index.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Xen: 4.24

CPE2.3 External links

https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
https://lists.xen.org/archives/html/xen-announce/2012-09/msg00005.html
https://osvdb.org/85198
https://secunia.com/advisories/50472
https://secunia.com/advisories/50530
https://secunia.com/advisories/51413
https://secunia.com/advisories/55082
https://security.gentoo.org/glsa/glsa-201309-24.xml
https://securitytracker.com/id?1027483
https://support.citrix.com/article/CTX134708
https://wiki.xen.org/wiki/Security_Announcements#XSA-16_PHYSDEVOP_map_pirq_index_vulnerability
https://www.openwall.com/lists/oss-security/2012/09/05/9
https://www.securityfocus.com/bid/55414
https://bugzilla.redhat.com/show_bug.cgi?id=851193
https://exchange.xforce.ibmcloud.com/vulnerabilities/78269
https://security.gentoo.org/glsa/201604-03


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###