CVE-2012-3498
published 2012-11-23CVE-2012-3498: PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service (host crash) and…
medium5.6CVSS 3.1
AVLACLAuNCPINAC
PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service (host crash) and possibly read hypervisor or guest memory via vectors related to a missing range check of map->index.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| citrix | citrix_adm | — | — |
| citrix | citrix_hypervisor | — | — |
| citrix | citrix_virtual_apps_and_desktops | — | — |
| citrix | endpoint_management | — | — |
| citrix | netscaler_adc | — | — |
| citrix | netscaler_gateway | — | — |
| citrix | xenserver | <= 6.0.2 | — |
| citrix | xenserver | — | — |
| debian | xen | < xen 4.1.3-2 (bookworm) | xen 4.1.3-2 (bookworm) |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | >= 0 < 4.1.3-2 | 4.1.3-2 |
| xen | xen | >= 0 < 4.1.3-2 | 4.1.3-2 |
| xen | xen | >= 0 < 4.1.3-2 | 4.1.3-2 |
| xen | xen | >= 0 < 4.1.3-2 | 4.1.3-2 |
CVSS provenance
nvd5.6MEDIUMAV:L/AC:L/Au:N/C:P/I:N/A:C
osv5.6MEDIUM