CVE-2012-3494 in XenServer
Summary
The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service (host crash) by writing to the reserved bits of the DR7 debug control register.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
06/14/2012
Disclosure
11/23/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 6108 | Citrix XenServer set_debugreg access control | 264 | Not defined | Official fix | CVE-2012-3494 |
| 6106 | Citrix Xen set_debugreg access control | 264 | Not defined | Official fix | CVE-2012-3494 |