National Cyber Awareness System

Vulnerability Summary for CVE-2012-3495

Overview

The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service (invalid memory write and host crash) and possibly gain privileges via unspecified vectors.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://xenbits.xen.org/hg/xen-4.1-testing.hg/rev/6779ddca8593

Hyperlink:http://xenbits.xen.org/hg/xen-4.1-testing.hg/rev/6779ddca8593

External Source: SECTRACK

Name: 1027480

Hyperlink:http://www.securitytracker.com/id?1027480

External Source: BID

Name: 55406

Hyperlink:http://www.securityfocus.com/bid/55406

External Source: MLIST

Name: [oss-security] 20120905 Xen Security Advisory 13 (CVE-2012-3495) - hypercall physdev_get_free_pirq vulnerability

Hyperlink:http://www.openwall.com/lists/oss-security/2012/09/05/6

External Source: CONFIRM

Name: http://wiki.xen.org/wiki/Security_Announcements#XSA-13_hypercall_physdev_get_free_pirq_vulnerability

Hyperlink:http://wiki.xen.org/wiki/Security_Announcements#XSA-13_hypercall_physdev_get_free_pirq_vulnerability

External Source: CONFIRM

Name: http://support.citrix.com/article/CTX134708

Hyperlink:http://support.citrix.com/article/CTX134708

External Source: MLIST

Name: [Xen-announce] 20120905 Xen Security Advisory 13 (CVE-2012-3495) - hypercall physdev_get_free_pirq vulnerability

Hyperlink:http://lists.xen.org/archives/html/xen-announce/2012-09/msg00001.html

External Source: SUSE

Name: openSUSE-SU-2012:1572

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html

External Source: SUSE

Name: openSUSE-SU-2012:1172

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html

External Source: SUSE

Name: SUSE-SU-2012:1133

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html

External Source: SUSE

Name: SUSE-SU-2012:1132

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html