CVE-2012-5634

Published: 08 January 2013

Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt.

Status

Notes

hypervisor packages are in universe. For
issues in the hypervisor, add appropriate
tags to each section, ex:
Tags_xen: universe-binary

Xen Security Advisory 33

only 4.0 and + are vulnerable

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5634
• http://www.openwall.com/lists/oss-security/2013/01/09/5
• NVD
• Launchpad
• Debian