CVE

Id
56676  
CVE No.
CVE-2012-3433  
Status
Candidate  
Description
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.  
Phase
Assigned (20120614)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
586781 56676 CVE-2012-3433 MLIST:[Xen-devel] 20120809 Xen Security Advisory 11 (CVE-2012-3433) - HVM destroy p2m host DoS  View
586782 56676 CVE-2012-3433 URL:http://lists.xen.org/archives/html/xen-devel/2012-08/msg00855.html  View
586783 56676 CVE-2012-3433 MLIST:[oss-security] 20120809 Xen Security Advisory 11 (CVE-2012-3433) - HVM destroy p2m host DoS  View
586784 56676 CVE-2012-3433 URL:http://www.openwall.com/lists/oss-security/2012/08/09/3  View
586785 56676 CVE-2012-3433 DEBIAN:DSA-2531  View
586786 56676 CVE-2012-3433 URL:http://www.debian.org/security/2012/dsa-2531  View
586787 56676 CVE-2012-3433 GENTOO:GLSA-201309-24  View
586788 56676 CVE-2012-3433 URL:http://security.gentoo.org/glsa/glsa-201309-24.xml  View
586789 56676 CVE-2012-3433 SUSE:openSUSE-SU-2012:1172  View
586790 56676 CVE-2012-3433 URL:http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html  View
586791 56676 CVE-2012-3433 SUSE:openSUSE-SU-2012:1174  View
586792 56676 CVE-2012-3433 URL:http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html  View
586793 56676 CVE-2012-3433 SUSE:SUSE-SU-2012:1043  View
586794 56676 CVE-2012-3433 URL:http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00024.html  View
586795 56676 CVE-2012-3433 SUSE:SUSE-SU-2012:1044  View
586796 56676 CVE-2012-3433 URL:http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html  View
586797 56676 CVE-2012-3433 BID:54942  View
586798 56676 CVE-2012-3433 URL:http://www.securityfocus.com/bid/54942  View
586799 56676 CVE-2012-3433 SECUNIA:55082  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27803 JVNDB-2012-003510 GraphicsMagick の coders/png.c の Magick_png_malloc 関数におけるサービス運用妨害 (DoS) の脆弱性 GraphicsMagick の coders/png.c の Magick_png_malloc 関数は、割り当てサイズの変数に適切な型を使用しないため、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2012-3438 56676 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003510.html  View