Improper input validation in Citrix Xenserver

CVE-2012-3498

PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service (host crash) and possibly read hypervisor or guest memory via vectors related to a missing range check of map->index.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.004 (35.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References