Show filters
77 Total Results
Displaying 71-77 of 77
Sort by:
Attacker Value
Unknown
CVE-2012-3432
Disclosure Date: December 03, 2012 (last updated October 05, 2023)
The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions.
0
Attacker Value
Unknown
CVE-2012-3495
Disclosure Date: November 23, 2012 (last updated October 05, 2023)
The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service (invalid memory write and host crash) and possibly gain privileges via unspecified vectors.
0
Attacker Value
Unknown
CVE-2012-4539
Disclosure Date: November 21, 2012 (last updated October 05, 2023)
Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vulnerability."
0
Attacker Value
Unknown
CVE-2012-4537
Disclosure Date: November 21, 2012 (last updated October 05, 2023)
Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability."
0
Attacker Value
Unknown
CVE-2012-4535
Disclosure Date: November 21, 2012 (last updated October 05, 2023)
Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline."
0
Attacker Value
Unknown
CVE-2012-4544
Disclosure Date: October 31, 2012 (last updated October 05, 2023)
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
0
Attacker Value
Unknown
CVE-2012-2625
Disclosure Date: October 31, 2012 (last updated October 05, 2023)
The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1) bzip2 or (2) lzma compressed kernel image.
0
