Vulnerability in Xen

CVE-2012-4535

Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline."

EPSS: 0.004 (31.2th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 3.4.0, 3.4.1, 3.4.2
  • N/a — versions n/a

Weakness classification (CWE)

References