NVD

Id
46990  
Name
CVE-2012-6034  
Description
The (1) tmemc_save_get_next_page and (2) tmemc_save_get_next_inv functions and the (3) TMEMC_SAVE_GET_POOL_UUID sub-operation in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 "do not check incoming guest output buffer pointers," which allows local guest OS users to cause a denial of service (memory corruption and host crash) or execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-11-23  
Modified Date
2013-10-10  
Seq
2012-6034  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235325 46990 CVE-2012-6034 [Xen-announce] 20120905 Xen Security Advisory 15 (CVE-2012-3497) - multiple TMEM hypercall vulnerabilities  View
235326 46990 CVE-2012-6034 GLSA-201309-24  View
235327 46990 CVE-2012-6034 http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities  View
235328 46990 CVE-2012-6034 [oss-security] 20120905 Xen Security Advisory 15 (CVE-2012-3497) - multiple TMEM hypercall vulnerabilities  View
235329 46990 CVE-2012-6034 55410  View
235330 46990 CVE-2012-6034 1027482  View
235331 46990 CVE-2012-6034 xen-tmem-priv-esc(78268)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29813 JVNDB-2012-005520 Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性 Xen の Transcendent Memory (TMEM) 内の下記の関数には、サービス運用妨害 (メモリの破損およびホストクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2012-6034 59272 CVE-2012-6034 46990 4.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005520.html 2012-09-05 2012-12-07 View