CVE-2012-5525 in Xen
Summary
The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read.
Once again VulDB remains the best source for vulnerability data.
Reservation
10/24/2012
Disclosure
12/13/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7084 | Citrix Xen get_page_from_gfn privileges management | 269 | High | Official fix | CVE-2012-5525 |