#VU32742 Configuration in Xen - CVE-2012-3496


| Updated: 2020-07-28

Vulnerability identifier: #VU32742

Vulnerability risk: Low

CVSSv4.0: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2012-3496

CWE-ID: CWE-16

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Xen
Server applications / Virtualization software

Vendor: Xen Project

Description

The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.

XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Xen: 4.24


External links
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
https://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html
https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
https://lists.xen.org/archives/html/xen-announce/2012-09/msg00002.html
https://secunia.com/advisories/50472
https://secunia.com/advisories/50530
https://secunia.com/advisories/51413
https://secunia.com/advisories/55082
https://security.gentoo.org/glsa/glsa-201309-24.xml
https://securitytracker.com/id?1027481
https://support.citrix.com/article/CTX134708
https://wiki.xen.org/wiki/Security_Announcements#XSA-14_XENMEM_populate_physmap_DoS_vulnerability
https://www.debian.org/security/2012/dsa-2544
https://www.openwall.com/lists/oss-security/2012/09/05/7
https://www.osvdb.org/85200
https://www.securityfocus.com/bid/55412
https://bugzilla.redhat.com/show_bug.cgi?id=854590
https://exchange.xforce.ibmcloud.com/vulnerabilities/78267
https://security.gentoo.org/glsa/201604-03


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability