Vulnerability in Xen

CVE-2012-4539

Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vulnerability."

EPSS: 0.004 (35.5th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 4.0.0, 4.0.1, 4.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References