CVE-2012-5514: Medium severity xen xapi vulnerability
The guestphysmapmarkpopulateondemand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5514?
CVE-2012-5514 has been assigned a medium severity level due to its potential to cause denial of service.
How do I fix CVE-2012-5514?
To mitigate CVE-2012-5514, upgrade to a newer version of Xen that addresses this vulnerability.
What versions of Xen are affected by CVE-2012-5514?
CVE-2012-5514 affects Xen versions up to and including 4.2 and several earlier versions such as 3.0.2 to 4.1.3.
What type of attack can leverage CVE-2012-5514?
CVE-2012-5514 can be exploited by local guest HVM administrators to cause a denial of service by hanging the system.
Is CVE-2012-5514 a local or remote vulnerability?
CVE-2012-5514 is a local vulnerability that requires access to the guest HVM environment to exploit.