CVE-2012-3496: Medium severity Citrix XenServer vulnerability
XENMEMpopulatephysmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMFpopulateondemand.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3496?
CVE-2012-3496 is considered to be of high severity due to its potential to cause a denial of service attack leading to host crashes.
How do I fix CVE-2012-3496?
To fix CVE-2012-3496, upgrade to Xen version 4.3 or later, or Citrix XenServer 6.1 or later.
What systems are affected by CVE-2012-3496?
CVE-2012-3496 affects Xen versions 4.0, 4.1, 4.2, and Citrix XenServer 6.0.2 and earlier.
What types of attacks can be executed with CVE-2012-3496?
CVE-2012-3496 allows local PV OS guest kernels to cause a denial of service by triggering a bug through invalid flags.
Is there a workaround for CVE-2012-3496?
There is no widely recommended workaround for CVE-2012-3496, and upgrading to a fixed version is the best option.