VULNERABILITY INTELLIGENCE

CVE-2012-5514

CVSS score4.7 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2012-12-13
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:N/A:C

Description

The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors.

Primary references