Vulnerability in Xen

CVE-2012-3433

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.

EPSS: 0.004 (34.1th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 4.0.0, 4.1.0
  • N/a — versions n/a

Weakness classification (CWE)

References