NVD

Id
46991  
Name
CVE-2012-6035  
Description
The do_tmem_destroy_pool function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly validate pool ids, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-11-23  
Modified Date
2013-10-10  
Seq
2012-6035  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235332 46991 CVE-2012-6035 [Xen-announce] 20120905 Xen Security Advisory 15 (CVE-2012-3497) - multiple TMEM hypercall vulnerabilities  View
235333 46991 CVE-2012-6035 GLSA-201309-24  View
235334 46991 CVE-2012-6035 http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities  View
235335 46991 CVE-2012-6035 [oss-security] 20120905 Xen Security Advisory 15 (CVE-2012-3497) - multiple TMEM hypercall vulnerabilities  View
235336 46991 CVE-2012-6035 55410  View
235337 46991 CVE-2012-6035 1027482  View
235338 46991 CVE-2012-6035 xen-tmem-priv-esc(78268)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29814 JVNDB-2012-005521 Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性 Xen の Transcendent Memory (TMEM) 内の do_tmem_destroy_pool 関数は、プール ID を適切に検証しないため、サービス運用妨害 (メモリ破損およびホストクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2012-6035 59273 CVE-2012-6035 46991 6.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005521.html 2012-09-05 2012-11-27 View