Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-3495

Опубликовано: 23 нояб. 2012
Источник: nvd
CVSS2: 6.1
EPSS Низкий

Описание

The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service (invalid memory write and host crash) and possibly gain privileges via unspecified vectors.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:citrix:xenserver:*:*:*:*:*:*:*:*
Версия до 6.0.2 (включая)
cpe:2.3:a:citrix:xenserver:5.0:*:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:5.5:*:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:5.6:*:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:5.6:fp1:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:5.6:sp2:*:*:*:*:*:*
cpe:2.3:a:citrix:xenserver:6.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 24%
0.00081
Низкий

6.1 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu
около 13 лет назад

The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service (invalid memory write and host crash) and possibly gain privileges via unspecified vectors.

redhat
больше 13 лет назад

The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service (invalid memory write and host crash) and possibly gain privileges via unspecified vectors.

debian
около 13 лет назад

The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x ...

github
больше 3 лет назад

The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service (invalid memory write and host crash) and possibly gain privileges via unspecified vectors.

EPSS

Процентиль: 24%
0.00081
Низкий

6.1 Medium

CVSS2

Дефекты

CWE-20