NVD

Id
46992  
Name
CVE-2012-6036  
Description
The (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 do not check for negative id pools, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or possibly execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-11-23  
Modified Date
2013-10-10  
Seq
2012-6036  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235339 46992 CVE-2012-6036 [Xen-announce] 20120905 Xen Security Advisory 15 (CVE-2012-3497) - multiple TMEM hypercall vulnerabilities  View
235340 46992 CVE-2012-6036 GLSA-201309-24  View
235341 46992 CVE-2012-6036 http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities  View
235342 46992 CVE-2012-6036 [oss-security] 20120905 Xen Security Advisory 15 (CVE-2012-3497) - multiple TMEM hypercall vulnerabilities  View
235343 46992 CVE-2012-6036 55410  View
235344 46992 CVE-2012-6036 1027482  View
235345 46992 CVE-2012-6036 xen-tmem-priv-esc(78268)  View
235346 46992 CVE-2012-6036 xen-memcsavegetnextpage-code-exec(80326)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29815 JVNDB-2012-005522 Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性 Xen の Transcendent Memory (TMEM) 内の下記の関数は、無効な ID プールを確認しないため、サービス運用妨害 (メモリの破損およびホストクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2012-6036 59274 CVE-2012-6036 46992 4.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005522.html 2012-09-05 2012-11-27 View