CVE-2012-4544: Input Validation
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4544?
CVE-2012-4544 is classified as a denial of service vulnerability due to excessive memory consumption in domain 0.
How do I fix CVE-2012-4544?
To fix CVE-2012-4544, upgrade to Xen version 4.2.1 or later, which contains the necessary patches.
What are the affected versions in CVE-2012-4544?
CVE-2012-4544 affects Xen 4.2 and earlier versions, specifically 4.1.x versions including 4.1.0 to 4.1.3.
What type of attack does CVE-2012-4544 allow?
CVE-2012-4544 allows local guest administrators to perform denial of service attacks through crafted kernels or ramdisks.
Can CVE-2012-4544 impact my Xen environment?
Yes, CVE-2012-4544 can significantly impact your Xen environment by causing domain 0 to consume excessive memory.