CVE-2012-6035 in Xen

Resumen (Inglés)

The do_tmem_destroy_pool function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly validate pool ids, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2012-11-23

Divulgación

2012-11-23

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
63037	Linux Foundation Xen do_tmem_destroy_pool escalada de privilegios	20	No está definido	No está definido	CVE-2012-6035

Fuentes

• MITRE
• NVD
• CVE Details