CVE-2012-4535: Low severity xen xapi vulnerability

Published Nov 21, 2012

Updated

Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline."

Affected Software

15 affected components

XEN Xen=3.4.0

XEN Xen=3.4.1

XEN Xen=3.4.2

XEN Xen=3.4.3

XEN Xen=3.4.4

XEN Xen=4.0.0

XEN Xen=4.0.1

XEN Xen=4.0.2

XEN Xen=4.0.3

XEN Xen=4.0.4

XEN Xen=4.1.0

XEN Xen=4.1.1

XEN Xen=4.1.2

XEN Xen=4.1.3

XEN Xen=4.2.0

Event History

Nov 21, 2012

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-4535?

CVE-2012-4535 is considered to be of medium severity due to its potential to cause denial of service.

How does CVE-2012-4535 affect systems?

CVE-2012-4535 allows local guest OS administrators to create an infinite loop leading to physical CPU resource consumption.

What versions are affected by CVE-2012-4535?

CVE-2012-4535 affects Xen versions from 3.4 through 4.2, with potential impact on earlier versions.

How do I fix CVE-2012-4535?

To fix CVE-2012-4535, it is recommended to upgrade to the latest version of Xen that resolves this vulnerability.

Who is at risk from CVE-2012-4535?

Local guest OS administrators are at risk from CVE-2012-4535 as they can exploit this vulnerability to cause denial of service.