NVD

Id
46989  
Name
CVE-2012-6033  
Description
The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest OS users to access control stack operations via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-11-23  
Modified Date
2013-10-10  
Seq
2012-6033  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235318 46989 CVE-2012-6033 [Xen-announce] 20120905 Xen Security Advisory 15 (CVE-2012-3497) - multiple TMEM hypercall vulnerabilities  View
235319 46989 CVE-2012-6033 GLSA-201309-24  View
235320 46989 CVE-2012-6033 http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities  View
235321 46989 CVE-2012-6033 [oss-security] 20120905 Xen Security Advisory 15 (CVE-2012-3497) - multiple TMEM hypercall vulnerabilities  View
235322 46989 CVE-2012-6033 55410  View
235323 46989 CVE-2012-6033 1027482  View
235324 46989 CVE-2012-6033 xen-tmem-priv-esc(78268)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29812 JVNDB-2012-005519 Xen の Transcendent Memory における制御スタックオペレーションにアクセスされる脆弱性 Xen の Transcendent Memory (TMEM) 内の do_tmem_control 関数には、権限を適切に確認しないため、制御スタックオペレーションにアクセスされる脆弱性が存在します。 CVE-2012-6033 59271 CVE-2012-6033 46989 4.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005519.html 2012-09-05 2012-11-27 View