CVE-2012-4535

Name of the Vulnerable Software and Affected Versions Xen versions 3.4 through 4.2 Xen versions prior to 3.4

Description The issue allows local guest OS administrators to cause a denial of service by setting a VCPU with an "inappropriate deadline", resulting in a Xen infinite loop and physical CPU consumption.

Recommendations For Xen versions 3.4 through 4.2, consider restricting VCPU settings to prevent the denial of service. For Xen versions prior to 3.4, consider upgrading to a version where this issue is addressed, or apply configuration changes to limit the impact of the issue. As a temporary workaround, consider disabling VCPU settings until a patch is available.