VULNERABILITY INTELLIGENCE
CVE-2012-2625
CVSS score2.7 LOW
EPSS probability0.92%
CISA KEVNot currently listed
Published2012-10-31
Last modified2026-06-16
CVSS vectorAV:A/AC:L/Au:S/C:N/I:N/A:P
Description
The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1) bzip2 or (2) lzma compressed kernel image.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- cve@mitre.org — Broken Link
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory