Xen CVE-2012-3433 Denial of Service Vulnerability

Bugtraq ID:	54942
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2012-3433
Remote:	No
Local:	Yes
Published:	Aug 09 2012 12:00AM
Updated:	Apr 13 2015 09:41PM
Credit:	Reported by the vendor
Vulnerable:	XenSource Xen 3.3.1 XenSource Xen 3.3 XenSource Xen 3.2 XenSource Xen 3.1.2 XenSource Xen 3.1.1 XenSource Xen 3.0.3 XenSource Xen 4.1 XenSource Xen 4.0 XenSource Xen 3.4 XenSource Xen 3.0 SuSE SUSE Linux Enterprise Server for VMware 11 SP1 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP1 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise SDK 11 SP1 SuSE Suse Linux Enterprise Desktop 11 SP1 + Linux kernel 2.6.5 S.u.S.E. openSUSE 12.1 S.u.S.E. openSUSE 11.4 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix XenServer 6.0.2 Citrix NetScaler SDX 9.3 Citrix NetScaler SDX 10
Not Vulnerable:

Xen CVE-2012-3433 Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Xen CVE-2012-3433 Denial of Service Vulnerability

Solution:
A vendor patch is available. Please see the references for more information.

Xen CVE-2012-3433 Denial of Service Vulnerability

References:

• Xen Project Homepage (Xen Project)
  
• Xen Security Advisory 11 (CVE-2012-3433) - HVM destroy p2m host DoS (Xen.org security team)
  
• Citrix NetScaler SDX Multiple Security Updates (Citrix)
  
• Citrix XenServer Multiple Security Updates (Citrix)