CVE-2012-3516: Medium severity Citrix XenServer vulnerability
The GNTTABOPswapgrantref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service (host crash) and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hypervisor memory location.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3516?
CVE-2012-3516 has a high severity level due to its potential to cause a denial of service and privilege escalation.
How do I fix CVE-2012-3516?
To fix CVE-2012-3516, upgrade to a patched version of Xen or Citrix XenServer that addresses this vulnerability.
Who is affected by CVE-2012-3516?
CVE-2012-3516 affects local guest kernels or administrators using Xen 4.2 and Citrix XenServer versions up to and including 6.0.2.
What type of vulnerability is CVE-2012-3516?
CVE-2012-3516 is a denial of service vulnerability that may also allow privilege escalation.
Can CVE-2012-3516 be exploited remotely?
CVE-2012-3516 requires local access to exploit, so it cannot be exploited remotely.