CVE-2012-2934: Low severity XEN Xen vulnerability
Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a denial of service (host hang) via sequential execution of instructions across a non-canonical boundary, a different vulnerability than CVE-2012-0217.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2934?
CVE-2012-2934 is considered a high severity vulnerability due to its potential to cause a denial of service on the host.
How do I fix CVE-2012-2934?
To mitigate CVE-2012-2934, upgrade to a later version of Xen that addresses this vulnerability, specifically avoiding older 64-bit PV guest configurations.
Who is affected by CVE-2012-2934?
CVE-2012-2934 affects users running Xen versions 4.0.0 and 4.1.0 on older AMD CPUs with 64-bit PV guests.
What kind of attack does CVE-2012-2934 enable?
CVE-2012-2934 allows local guest OS users to execute instructions that can lead to a denial of service by causing the host machine to hang.
Is CVE-2012-2934 a remote or local vulnerability?
CVE-2012-2934 is a local vulnerability, meaning it requires an attacker to have access to the guest operating system to exploit it.