CVE-2012-4537: Low severity xen xapi vulnerability
Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the setp2mentry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4537?
CVE-2012-4537 has been classified as a denial of service vulnerability that could lead to memory consumption and assertion failure.
How do I fix CVE-2012-4537?
To mitigate CVE-2012-4537, users should upgrade to the latest available version of Xen that contains the necessary patches.
Which versions of Xen are affected by CVE-2012-4537?
CVE-2012-4537 affects Xen versions from 3.4 to 4.2, including specific releases like 3.4.0 to 4.2.0.
What kind of attack can exploit CVE-2012-4537?
An attacker with local administrative access to a guest HVM OS can exploit CVE-2012-4537 to cause a denial of service.
Is CVE-2012-4537 related to memory management issues?
Yes, CVE-2012-4537 relates to improper synchronization of memory mapping tables, which can lead to significant memory issues.