Vulnerability in Xen

CVE-2012-4537

Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability."

EPSS: 0.004 (35.5th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 3.4.0, 3.4.1, 3.4.2
  • N/a — versions n/a

Weakness classification (CWE)

References