VULNERABILITY INTELLIGENCE
CVE-2012-4544
CVSS score2.1 LOW
EPSS probability0.42%
CISA KEVNot currently listed
Published2012-10-31
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:N/A:P
Description
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
Weakness classification
- CWE-20: Improper Input Validation