Home > Vulnerability Database > CVE-2012-4544

Mend.io Vulnerability Database

CVE-2012-4544

Good to know:

Date: October 31, 2012

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.

Language: C

Severity Score

4.0

Related Resources (24)

Url: http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

Url: http://secunia.com/advisories/51071

Url: http://www.debian.org/security/2013/dsa-2636

Url: https://access.redhat.com/security/cve/CVE-2012-4544

Url: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html

Url: http://rhn.redhat.com/errata/RHSA-2013-0241.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2012-4544

Url: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html

Url: http://secunia.com/advisories/51352

Url: http://secunia.com/advisories/51413

Url: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html

Url: http://secunia.com/advisories/51324

Url: http://osvdb.org/86619

Url: http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html

Url: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html

Url: http://www.securityfocus.com/bid/56289

Url: http://www.openwall.com/lists/oss-security/2012/10/26/3

Url: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/79617

Url: http://www.securitytracker.com/id?1027699

Url: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html

Url: http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html

Url: https://www.mend.io/vulnerability-database/CVE-2012-4544

Severity Score

4.0

Weakness Type (CWE)

Input Validation

CWE-20

Top Fix

Upgrade Version

Upgrade to version 4.3.0-rc1,RELEASE-4.3.0

Learn More

CVSS v3.1

Base Score:	4.0
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	LOW

CVSS v2

Base Score:	2.1
Access Vector (AV):	LOCAL
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2012-4544

Good to know:

Date: October 31, 2012

Language: C

Severity Score

Related Resources (24)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3.1

CVSS v2

Do you need more information?