Your submission was sent successfully! Close

CVE-2012-5634

Published: 8 January 2013

Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt.

Priority

Medium

Status

Package Release Status
xen
Launchpad, Ubuntu, Debian
hardy Does not exist

lucid Does not exist

oneiric
Released (4.1.1-2ubuntu4.5)
precise
Released (4.1.2-2ubuntu2.5)
quantal
Released (4.1.3-3ubuntu1.2)
raring
Released (4.2.0-1ubuntu6)
upstream Needs triage

xen-3.1
Launchpad, Ubuntu, Debian
hardy Not vulnerable

lucid Does not exist

oneiric Does not exist

precise Does not exist

quantal Does not exist

raring Does not exist

upstream Needs triage

xen-3.2
Launchpad, Ubuntu, Debian
hardy Not vulnerable

lucid Does not exist

oneiric Does not exist

precise Does not exist

quantal Does not exist

raring Does not exist

upstream Needs triage

xen-3.3
Launchpad, Ubuntu, Debian
hardy Does not exist

lucid Not vulnerable

oneiric Does not exist

precise Does not exist

quantal Does not exist

raring Does not exist

upstream Needs triage

Notes

AuthorNote
mdeslaur
hypervisor packages are in universe. For
issues in the hypervisor, add appropriate
tags to each section, ex:
Tags_xen: universe-binary
jdstrand
Xen Security Advisory 33
mdeslaur
only 4.0 and + are vulnerable

References