CVE-2012-3498: Input Validation
PHYSDEVOPmappirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service (host crash) and possibly read hypervisor or guest memory via vectors related to a missing range check of map->index.
Other sources
PHYSDEVOPmappirq with MAPPIRQTYPEGSI does not range check map->index.
A malicious HVM guest kernel can crash the host. It might also be able to read hypervisor or guest memory.
All Xen systems running HVM guests are vulnerable. PV guests are not vulnerable.
Acknowledgements:
Red Hat would like to thank the Xen project for reporting this issue. Upstream acknowledges Matthew Daley as the original reporter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3498?
CVE-2012-3498 is rated as a critical vulnerability due to its potential to cause host crashes and unauthorized access to sensitive memory.
How do I fix CVE-2012-3498?
To fix CVE-2012-3498, you should upgrade to Xen versions 4.3 or later, or Citrix XenServer version 6.1 or newer.
Who is affected by CVE-2012-3498?
CVE-2012-3498 affects local HVM guest OS kernels running on Xen 4.1, 4.2, and Citrix XenServer versions up to and including 6.0.2.
What type of vulnerability is CVE-2012-3498?
CVE-2012-3498 is a denial of service vulnerability that can lead to a host crash and possible memory exposure.
What is the impact of exploiting CVE-2012-3498?
Exploiting CVE-2012-3498 can result in severe disruption of the host system and potential exposure of hypervisor or guest memory.