Description
Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input.
References (12)
Core 12
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/55082
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/12/03/10
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/56796
Vendor Advisory x_refsource_confirm
http://support.citrix.com/article/CTX135777
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201309-24.xml
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51397
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51486
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/51487
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/88129
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80484
Scores
EPSS
0.0007
EPSS Percentile
21.4%
Details
CWE
CWE-399
Status
published
Products (12)
xen/xen
3.4.0
xen/xen
3.4.1
xen/xen
3.4.2
xen/xen
3.4.3
xen/xen
3.4.4
xen/xen
4.0.0
xen/xen
4.0.1
xen/xen
4.0.2
xen/xen
4.0.3
xen/xen
4.0.4
... and 2 more
Published
Dec 13, 2012
Tracked Since
Feb 18, 2026