| Max CVSS | 6.9 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-5513 | 6.9 |
The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memor
|
13-02-2023 - 00:26 | 13-12-2012 - 11:53 | |
| CVE-2012-5510 | 4.7 |
Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vecto
|
29-08-2017 - 01:32 | 13-12-2012 - 11:53 | |
| CVE-2012-6333 | 4.7 |
Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input.
|
29-08-2017 - 01:32 | 13-12-2012 - 11:53 | |
| CVE-2012-4537 | 2.1 |
Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assert
|
29-08-2017 - 01:32 | 21-11-2012 - 23:55 | |
| CVE-2012-5511 | 4.7 |
Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image.
|
29-08-2017 - 01:32 | 13-12-2012 - 11:53 | |
| CVE-2012-4538 | 4.9 |
The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.
|
29-08-2017 - 01:32 | 24-11-2012 - 20:55 | |
| CVE-2012-5515 | 4.7 |
The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value.
|
29-08-2017 - 01:32 | 13-12-2012 - 11:53 | |
| CVE-2012-5514 | 4.7 |
The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vect
|
29-08-2017 - 01:32 | 13-12-2012 - 11:53 | |
| CVE-2012-5512 | 3.2 |
Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.
|
29-08-2017 - 01:32 | 13-12-2012 - 11:53 | |
| CVE-2012-4535 | 1.9 |
Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline."
|
29-08-2017 - 01:32 | 21-11-2012 - 23:55 | |
| CVE-2012-4539 | 2.1 |
Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hy
|
29-08-2017 - 01:32 | 21-11-2012 - 23:55 |