CVE-2012-3432: Low severity XEN Xen vulnerability
The handlemmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3432?
CVE-2012-3432 has a medium severity rating as it can lead to denial of service for the guest OS.
How do I fix CVE-2012-3432?
To fix CVE-2012-3432, upgrade your Xen installation to a patched version that addresses this vulnerability.
Which versions of Xen are affected by CVE-2012-3432?
CVE-2012-3432 affects Xen versions 3.3.0 and 4.0.0 to 4.2.0.
What type of attack is possible with CVE-2012-3432?
CVE-2012-3432 allows local guest OS users to cause a denial of service, leading to a crash of the guest OS.
Can CVE-2012-3432 be exploited remotely?
CVE-2012-3432 cannot be exploited remotely as it requires local access to the guest OS.