Your submission was sent successfully! Close

CVE-2012-5634

Published: 8 January 2013

Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt.

Priority

Medium

Status

Package Release Status
xen
Launchpad, Ubuntu, Debian 		hardy Does not exist

lucid Does not exist

oneiric
Released (4.1.1-2ubuntu4.5)
precise
Released (4.1.2-2ubuntu2.5)
quantal
Released (4.1.3-3ubuntu1.2)
raring
Released (4.2.0-1ubuntu6)
upstream Needs triage

xen-3.1
Launchpad, Ubuntu, Debian 		hardy Not vulnerable

lucid Does not exist

oneiric Does not exist

precise Does not exist

quantal Does not exist

raring Does not exist

upstream Needs triage

xen-3.2
Launchpad, Ubuntu, Debian 		hardy Not vulnerable

lucid Does not exist

oneiric Does not exist

precise Does not exist

quantal Does not exist

raring Does not exist

upstream Needs triage

xen-3.3
Launchpad, Ubuntu, Debian 		hardy Does not exist

lucid Not vulnerable

oneiric Does not exist

precise Does not exist

quantal Does not exist

raring Does not exist

upstream Needs triage

Notes

AuthorNote
mdeslaur 
hypervisor packages are in universe. For
issues in the hypervisor, add appropriate
tags to each section, ex:
Tags_xen: universe-binary
jdstrand 
Xen Security Advisory 33
mdeslaur 
only 4.0 and + are vulnerable

References

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

Further reading