CVE-2012-4544 in Xen
Summary
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
08/21/2012
Disclosure
10/31/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 6818 | Citrix Xen PV Domain Builder input validation | 20 | Not defined | Official fix | CVE-2012-4544 |