CVE-2012-3497: Input Validation

Published Nov 23, 2012

Updated

(1) TMEMCSAVEGETCLIENTWEIGHT, (2) TMEMCSAVEGETCLIENTCAP, (3) TMEMCSAVEGETCLIENTFLAGS and (4) TMEMCSAVEEND in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (NULL pointer dereference or memory corruption and host crash) or possibly have other unspecified impacts via a NULL client id.

Affected Software

3 affected components

XEN Xen=4.0.0

XEN Xen=4.1.0

XEN Xen=4.2.0

Event History

Nov 23, 2012

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3497?

CVE-2012-3497 has a severity rating that indicates it can lead to denial of service through NULL pointer dereference or memory corruption.

How do I fix CVE-2012-3497?

To fix CVE-2012-3497, upgrade your Xen installation to a version beyond 4.2.0.

Which versions of Xen are affected by CVE-2012-3497?

CVE-2012-3497 affects Xen versions 4.0.0, 4.1.0, and 4.2.0.

What type of impact can CVE-2012-3497 have on a system?

CVE-2012-3497 can lead to a denial of service, resulting in a host crash.

Can local guest OS users exploit CVE-2012-3497?

Yes, local guest OS users can exploit CVE-2012-3497 to cause system disruptions.