CVE-2012-6033
published 2012-11-23CVE-2012-6033: The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest OS users…
PriorityP417medium4.4CVSS 2.0
AVLACMAuNCPIPAP
EPSS
0.38%
29.7th percentile
The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest OS users to access control stack operations via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | xen | < xen 4.1.4-1 (bookworm) | xen 4.1.4-1 (bookworm) |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | >= 0 < 4.1.4-1 | 4.1.4-1 |
| xen | xen | >= 0 < 4.1.4-1 | 4.1.4-1 |
| xen | xen | >= 0 < 4.1.4-1 | 4.1.4-1 |
| xen | xen | >= 0 < 4.1.4-1 | 4.1.4-1 |
CVSS provenance
nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
osv6.9MEDIUM
vendor_debian6.9LOW
vendor_redhat6.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-p542-pm63-7qpp: The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4
ghsa_unreviewed·2022-05-17·CVSS 6.9
CVE-2012-6033 [MEDIUM] GHSA-p542-pm63-7qpp: The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4
The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest OS users to access control stack operations via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
OSV
CVE-2012-6033: The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4
osv·2012-11-23·CVSS 6.9
CVE-2012-6033 [MEDIUM] CVE-2012-6033: The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4
The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest OS users to access control stack operations via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
Debian
CVE-2012-6033: xen - The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, ...
vendor_debian·2012·CVSS 6.9
CVE-2012-6033 [MEDIUM] CVE-2012-6033: xen - The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, ...
The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest OS users to access control stack operations via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
Scope: local
bookworm: resolved (fixed in 4.1.4-1)
bullseye: resolved (fixed in 4.1.4-1)
forky: resolved (fixed in 4.1.4-1)
sid: resolved (fixed in 4.1.4-1)
trixie: resolved (fixed in 4.1.4-1)
Red Hat
CVE-2012-6033: The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4
vendor_redhat·CVSS 6.9
CVE-2012-6033 [MEDIUM] CVE-2012-6033: The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4
The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest OS users to access control stack operations via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
Statement: Not vulnerable.
This issue did not affect the versions of the kernel-xen package as shipped with Red Hat Enterprise Linux 5 because we did not support TMEM (Transcendent Memory).
This issue did not affect Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG as we did not have support for Xen hypervisor.
No detection rules found.
No public exploits indexed.
http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.htmlhttp://osvdb.org/85199http://secunia.com/advisories/50472http://secunia.com/advisories/55082http://security.gentoo.org/glsa/glsa-201309-24.xmlhttp://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilitieshttp://www.openwall.com/lists/oss-security/2012/09/05/8http://www.securityfocus.com/bid/55410http://www.securitytracker.com/id?1027482https://exchange.xforce.ibmcloud.com/vulnerabilities/78268https://security.gentoo.org/glsa/201604-03http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.htmlhttp://osvdb.org/85199http://secunia.com/advisories/50472http://secunia.com/advisories/55082http://security.gentoo.org/glsa/glsa-201309-24.xmlhttp://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilitieshttp://www.openwall.com/lists/oss-security/2012/09/05/8http://www.securityfocus.com/bid/55410http://www.securitytracker.com/id?1027482https://exchange.xforce.ibmcloud.com/vulnerabilities/78268https://security.gentoo.org/glsa/201604-03
2012-11-23
Published