Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-4544

Опубликовано: 31 окт. 2012
Источник: nvd
CVSS2: 2.1
EPSS Низкий

Описание

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*
Версия до 4.2.0 (включая)
cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 30%
0.00109
Низкий

2.1 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu
около 13 лет назад

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.

redhat
около 13 лет назад

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.

debian
около 13 лет назад

The PV domain builder in Xen 4.2 and earlier does not validate the siz ...

github
больше 3 лет назад

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.

oracle-oval
почти 13 лет назад

ELSA-2013-0241: xen security update (MODERATE)

EPSS

Процентиль: 30%
0.00109
Низкий

2.1 Low

CVSS2

Дефекты

CWE-20
Уязвимость CVE-2012-4544