#VU32735 Input validation error in Xen - CVE-2012-4538


| Updated: 2020-07-28

Vulnerability identifier: #VU32735

Vulnerability risk: Low

CVSSv4.0: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2012-4538

CWE-ID: CWE-20

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Xen
Server applications / Virtualization software

Vendor: Xen Project

Description

The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.

The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Xen: 4.24

External links
https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html
https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html
https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
https://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
https://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
https://lists.xen.org/archives/html/xen-announce/2012-11/msg00004.html
https://osvdb.org/87306
https://secunia.com/advisories/51200
https://secunia.com/advisories/51324
https://secunia.com/advisories/51352
https://secunia.com/advisories/51413
https://secunia.com/advisories/51468
https://secunia.com/advisories/55082
https://security.gentoo.org/glsa/glsa-201309-24.xml
https://www.debian.org/security/2012/dsa-2582
https://www.openwall.com/lists/oss-security/2012/11/13/3
https://www.securityfocus.com/bid/56498
https://www.securitytracker.com/id?1027762
https://exchange.xforce.ibmcloud.com/vulnerabilities/80025
https://security.gentoo.org/glsa/201604-03

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability


Gentoo update for Xen
SUSE Linux update for Xen
Input validation error in Xen
SUSE Linux update for libvirt
Input validation error in xen (Alpine package)
SUSE Linux update for Xen
SUSE Linux update for Xen