Launchpad CVE tracker

CVE 2012-4538

The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.

Related bugs and status

CVE-2012-4538 (Candidate) is related to these bugs:

Bug #1086801: xen: security advisories 20-25

		In	Importance	Status
1086801	xen: security advisories 20-25	xen (Ubuntu)	Medium	Fix Released
1086801	xen: security advisories 20-25	xen (Ubuntu Raring)	Medium	Fix Released
1086801	xen: security advisories 20-25	xen (Ubuntu Quantal)	Medium	Fix Released
1086801	xen: security advisories 20-25	xen (Ubuntu Precise)	Medium	Fix Released
1086801	xen: security advisories 20-25	xen (Ubuntu Oneiric)	Medium	Fix Released

Bug #1086875: xen: security advisories 26-32

		In	Importance	Status
1086875	xen: security advisories 26-32	xen (Ubuntu)	Medium	Fix Released
1086875	xen: security advisories 26-32	xen (Ubuntu Raring)	Medium	Fix Released
1086875	xen: security advisories 26-32	xen (Ubuntu Quantal)	Medium	Fix Released
1086875	xen: security advisories 26-32	xen (Ubuntu Precise)	Medium	Fix Released
1086875	xen: security advisories 26-32	xen (Ubuntu Oneiric)	Medium	Fix Released

Bug #1176209: Import problem caused by duplicate message ID

		In	Importance	Status
1176209	Import problem caused by duplicate message ID	xen (Ubuntu)	Low	Invalid
1176209	Import problem caused by duplicate message ID	xen (Ubuntu Precise)	Low	Fix Released
1176209	Import problem caused by duplicate message ID	xen (Ubuntu Quantal)	Low	Fix Released

Bug #1180396: Xen stable update to 4.1.5

		In	Importance	Status
1180396	Xen stable update to 4.1.5	xen (Ubuntu)	Low	Invalid
1180396	Xen stable update to 4.1.5	xen (Ubuntu Precise)	Medium	Fix Released
1180396	Xen stable update to 4.1.5	xen (Ubuntu Quantal)	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2012-4538

References