CVE-2012-4544

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2012-4544

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2012-4544.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2012-4544

Related

Published

2012-10-31T16:55:05Z

Modified

2024-06-30T12:00:03Z

Summary

[none]

Details

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.

References

Affected packages

Debian:11 / xen

Package

Name: xen
Purl: pkg:deb/debian/xen?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.1.3-4

Ecosystem specific

{
    "urgency": "low"
}

Debian:12 / xen

Package

Name: xen
Purl: pkg:deb/debian/xen?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.1.3-4

Ecosystem specific

{
    "urgency": "low"
}

Debian:13 / xen

Package

Name: xen
Purl: pkg:deb/debian/xen?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.1.3-4

Ecosystem specific

{
    "urgency": "low"
}