Vulnerability identifier: #VU32742
Vulnerability risk: Low
CVSSv4.0: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID:
CWE-ID:
CWE-16
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Xen
Server applications /
Virtualization software
Vendor: Xen Project
Description
The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.
XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.
Mitigation
Install update from vendor's website.
Vulnerable software versions
Xen: 4.24
External links
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html
https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
https://lists.xen.org/archives/html/xen-announce/2012-09/msg00002.html
https://secunia.com/advisories/50472
https://secunia.com/advisories/50530
https://secunia.com/advisories/51413
https://secunia.com/advisories/55082
https://security.gentoo.org/glsa/glsa-201309-24.xml
https://securitytracker.com/id?1027481
https://support.citrix.com/article/CTX134708
https://wiki.xen.org/wiki/Security_Announcements#XSA-14_XENMEM_populate_physmap_DoS_vulnerability
https://www.debian.org/security/2012/dsa-2544
https://www.openwall.com/lists/oss-security/2012/09/05/7
https://www.osvdb.org/85200
https://www.securityfocus.com/bid/55412
https://bugzilla.redhat.com/show_bug.cgi?id=854590
https://exchange.xforce.ibmcloud.com/vulnerabilities/78267
https://security.gentoo.org/glsa/201604-03
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.