CVE-2012-4536

Published: 21 November 2012

The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service (Xen crash) via a crafted pirq value that triggers an out-of-bounds read.

Priority

Status

Package	Release	Status
xen Launchpad, Ubuntu, Debian	Upstream	Needs triage






xen-3.1 Launchpad, Ubuntu, Debian	Upstream	Needs triage






xen-3.2 Launchpad, Ubuntu, Debian	Upstream	Needs triage






xen-3.3 Launchpad, Ubuntu, Debian	Upstream	Needs triage

Notes

Author	Note
mdeslaur	only xen 4.1 is vulnerable

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4536
http://xforce.iss.net/xforce/xfdb/80023
http://www.securitytracker.com/id?1027760
http://www.openwall.com/lists/oss-security/2012/11/13/2
http://osvdb.org/87297
http://lists.xen.org/archives/html/xen-announce/2012-11/msg00003.html
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM