Description
Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://rhn.redhat.com/errata/RHSA-2012-1540.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html ↗
- http://secunia.com/advisories/55082 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80024 ↗
- http://www.openwall.com/lists/oss-security/2012/11/13/6 ↗
- http://secunia.com/advisories/51413 ↗
- http://secunia.com/advisories/51200 ↗
- http://security.gentoo.org/glsa/glsa-201309-24.xml ↗
- http://www.debian.org/security/2012/dsa-2582 ↗
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html ↗
- http://lists.xen.org/archives/html/xen-announce/2012-11/msg00005.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html ↗
- http://secunia.com/advisories/51468 ↗
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html ↗
- http://secunia.com/advisories/51352 ↗
- http://secunia.com/advisories/51324 ↗
- https://security.gentoo.org/glsa/201604-03 ↗
- http://www.securityfocus.com/bid/56498 ↗
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html ↗
- http://osvdb.org/87307 ↗
- http://www.securitytracker.com/id?1027761 ↗