Buffer overflow in Xen

CVE-2012-5511

Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image.

Vulnerability class: Buffer Overflow

EPSS: 0.004 (35.7th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 3.4.0, 3.4.1, 3.4.2
  • N/a — versions n/a

Weakness classification (CWE)

References