NVD

Id
45089  
Name
CVE-2012-3497  
Description
(1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_CAP, (3) TMEMC_SAVE_GET_CLIENT_FLAGS and (4) TMEMC_SAVE_END in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (NULL pointer dereference or memory corruption and host crash) or possibly have other unspecified impacts via a NULL client id.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-11-23  
Modified Date
2014-05-05  
Seq
2012-3497  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
226160 45089 CVE-2012-3497 SUSE-SU-2012:1486  View
226161 45089 CVE-2012-3497 SUSE-SU-2012:1487  View
226162 45089 CVE-2012-3497 openSUSE-SU-2012:1572  View
226163 45089 CVE-2012-3497 openSUSE-SU-2012:1573  View
226164 45089 CVE-2012-3497 SUSE-SU-2014:0446  View
226165 45089 CVE-2012-3497 [Xen-announce] 20120905 Xen Security Advisory 15 (CVE-2012-3497) - multiple TMEM hypercall vulnerabilities  View
226166 45089 CVE-2012-3497 GLSA-201309-24  View
226167 45089 CVE-2012-3497 http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities  View
226168 45089 CVE-2012-3497 [oss-security] 20120905 Xen Security Advisory 15 (CVE-2012-3497) - multiple TMEM hypercall vulnerabilities  View
226169 45089 CVE-2012-3497 55410  View
226170 45089 CVE-2012-3497 1027482  View
226171 45089 CVE-2012-3497 xen-tmem-priv-esc(78268)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29802 JVNDB-2012-005509 Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性 Xen の Transcendent Memory (TMEM) の (1) TMEMC_SAVE_GET_CLIENT_WEIGHT、(2) TMEMC_SAVE_GET_CLIENT_CAP、(3) TMEMC_SAVE_GET_CLIENT_FLAGS、および (4) TMEMC_SAVE_END には、サービス運用妨害 (NULL ポインタデリファレンスまたはメモリ破損およびホストクラッシュ) 状態となるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2012-3497 56735 CVE-2012-3497 45089 6.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005509.html 2012-09-05 2012-11-27 View