Vulnerability in Xen

CVE-2012-5515

The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value.

EPSS: 0.004 (33.7th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 3.0.2, 3.0.3, 3.0.4
  • N/a — versions n/a

References