CVE-2012-6032: Integer Overflow
Multiple integer overflows in the (1) tmhcopyfromclient and (2) tmhcopytoclient functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (memory corruption and host crash) via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6032?
CVE-2012-6032 is considered to have a high severity due to potential memory corruption and host crash.
How do I fix CVE-2012-6032?
To fix CVE-2012-6032, upgrade Xen to a version that is not affected, such as versions later than 4.2.0.
Which software versions are affected by CVE-2012-6032?
CVE-2012-6032 affects Xen versions 4.0.0, 4.1.0, and 4.2.0.
What type of attack can be executed using CVE-2012-6032?
An attacker can exploit CVE-2012-6032 to induce a denial of service through memory corruption.
Who is impacted by CVE-2012-6032?
Local guest OS users on affected Xen versions can be impacted by CVE-2012-6032.