PT-2012-4780

CVE-2012-3516

·

تاريخ النشر

2012-11-23

·

تاريخ التحديث

2013-02-01

الوصف من

CVSS 2.0
6.9
متوسطة
المقاييسAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Xen versions 4.2 Citrix XenServer version 6.0.2
Description The issue allows local guest kernels or administrators to cause a denial of service, potentially leading to a host crash, and possibly gain privileges. This is achieved by crafting a grant reference that triggers a write to an arbitrary hypervisor memory location through the GNTTABOP swap grant ref sub-operation in the grant table hypercall.
Recommendations For Xen version 4.2, update to a version that includes a fix for this issue. For Citrix XenServer version 6.0.2, apply the recommended patch or update to a newer version that addresses this problem.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾