PT-2012-4780
CVE-2012-3516
·
Publicado
2012-11-23
·
Atualizado
2013-02-01
Descrição por
CVSS 2.0
6.9
MédiaMétricasAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Xen versions 4.2
Citrix XenServer version 6.0.2
Description
The issue allows local guest kernels or administrators to cause a denial of service, potentially leading to a host crash, and possibly gain privileges. This is achieved by crafting a grant reference that triggers a write to an arbitrary hypervisor memory location through the GNTTABOP swap grant ref sub-operation in the grant table hypercall.
Recommendations
For Xen version 4.2, update to a version that includes a fix for this issue.
For Citrix XenServer version 6.0.2, apply the recommended patch or update to a newer version that addresses this problem.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾