NVD Vulnerability Detail

CVE-2012-3496

Summary	XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.
Publication Date	Nov. 24, 2012, 5:55 a.m.
Registration Date	Jan. 28, 2021, 3 p.m.
Last Update	Nov. 21, 2024, 10:40 a.m.

CVSS2.0 : MEDIUM
Score	4.7
Vector	AV:L/AC:M/Au:N/C:N/I:N/A:C
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	高
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	いいえ

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:citrix:xenserver::::::::		6.0.2
cpe:2.3:o:xen:xen:4.0.0:::::::*
cpe:2.3:o:xen:xen:4.2.0:::::::*
cpe:2.3:o:xen:xen:4.1.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html
2	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html
3	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html
4	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html
5	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html
6	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html
7	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
8	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
9	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html
10	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html
11	http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
12	http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
13	http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
14	http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
15	http://lists.xen.org/archives/html/xen-announce/2012-09/msg00002.html	Vendor Advisory
16	http://lists.xen.org/archives/html/xen-announce/2012-09/msg00002.html	Vendor Advisory
17	http://secunia.com/advisories/50472	Vendor Advisory
18	http://secunia.com/advisories/50472	Vendor Advisory
19	http://secunia.com/advisories/50530	Vendor Advisory
20	http://secunia.com/advisories/50530	Vendor Advisory
21	http://secunia.com/advisories/51413
22	http://secunia.com/advisories/51413
23	http://secunia.com/advisories/55082
24	http://secunia.com/advisories/55082
25	http://security.gentoo.org/glsa/glsa-201309-24.xml
26	http://security.gentoo.org/glsa/glsa-201309-24.xml
27	http://securitytracker.com/id?1027481
28	http://securitytracker.com/id?1027481
29	http://support.citrix.com/article/CTX134708	Patch Vendor Advisory
30	http://support.citrix.com/article/CTX134708	Patch Vendor Advisory
31	http://wiki.xen.org/wiki/Security_Announcements#XSA-14_XENMEM_populate_physmap_DoS_vulnerability
32	http://wiki.xen.org/wiki/Security_Announcements#XSA-14_XENMEM_populate_physmap_DoS_vulnerability
33	http://www.debian.org/security/2012/dsa-2544
34	http://www.debian.org/security/2012/dsa-2544
35	http://www.openwall.com/lists/oss-security/2012/09/05/7
36	http://www.openwall.com/lists/oss-security/2012/09/05/7
37	http://www.osvdb.org/85200
38	http://www.osvdb.org/85200
39	http://www.securityfocus.com/bid/55412
40	http://www.securityfocus.com/bid/55412
41	https://bugzilla.redhat.com/show_bug.cgi?id=854590
42	https://bugzilla.redhat.com/show_bug.cgi?id=854590
43	https://exchange.xforce.ibmcloud.com/vulnerabilities/78267
44	https://exchange.xforce.ibmcloud.com/vulnerabilities/78267
45	https://security.gentoo.org/glsa/201604-03
46	https://security.gentoo.org/glsa/201604-03

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-16	環境設定	https://cwe.mitre.org/data/definitions/16.html

JVN Vulnerability Information

Xen および Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性

Title	Xen および Citrix XenServer におけるサービス運用妨害 (DoS) の脆弱性
Summary	Xen および Citrix XenServer の XENMEM_populate_physmap には、変換ページングモードが利用されていない場合、サービス運用妨害 (BUG の誘発およびホストクラッシュ) 状態となる脆弱性が存在します。
Possible impacts	ローカル PV OS ゲストカーネルにより、MEMF_populate_on_demand のような不正なフラグを介して、サービス運用妨害 (BUG の誘発およびホストクラッシュ) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 5, 2012, midnight
Registration Date	Nov. 27, 2012, 3:54 p.m.
Last Update	Dec. 7, 2012, 3:34 p.m.

Affected System

シトリックス・システムズ

Citrix XenServer 6.0.2 およびそれ以前

Xen 4.0

Xen 4.1

Xen 4.2

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-3496	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3496
National Vulnerability Database (NVD)
2	CVE-2012-3496	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-3496

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-16	https://jvndb.jvn.jp/ja/cwe/CWE-16.html

ベンダー情報

No	Name	URL
Citrix XenServer Multiple Security Updates
1	CTX134708	http://support.citrix.com/article/CTX134708
Debian Security Advisory
2	DSA-2544	http://www.debian.org/security/2012/dsa-2544
opensuse-security-announce
3	openSUSE-SU-2012:1172	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
4	openSUSE-SU-2012:1174	http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html
Red Hat Bugzilla
5	Bug 854590	https://bugzilla.redhat.com/show_bug.cgi?id=854590
Security Announcements
6	XSA-14 XENMEM_populate_physmap DoS vulnerability	http://wiki.xen.org/wiki/Security_Announcements#XSA-14_XENMEM_populate_physmap_DoS_vulnerability
Xen-announce
7	Xen Security Advisory 14 (CVE-2012-3496) - XENMEM_populate_physmap DoS vulnerability	http://lists.xen.org/archives/html/xen-announce/2012-09/msg00002.html

Change Log

No	Changed Details	Date of change
0	[2012年11月27日] 掲載 [2012年12月07日] ベンダ情報：openSUSE (openSUSE-SU-2012:1172) を追加ベンダ情報：openSUSE (openSUSE-SU-2012:1174) を追加	Feb. 17, 2018, 10:37 a.m.