XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | Nov 23, 2012 |
| Debian | — | Upgrade xen | Jul 30, 2024 | Nov 23, 2012 |
| Gentoo Linux | — | Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools. | Oct 30, 2017 | Nov 23, 2012 |
| Suse | — | Upgrade vm-installUpgrade xen-kmp-traceUpgrade xen-develUpgrade xen-doc-htmlUpgrade xen-libsUpgrade xen-tools-domUUpgrade xen-toolsUpgrade xen-libs-32bitUpgrade xen-kmp-paeUpgrade xen-kmp-defaultUpgrade xen-doc-pdfUpgrade xen | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Nov 23, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub