CVE-2012-3496 describes a denial-of-service vulnerability affecting Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier. A local PV OS guest kernel can trigger a host crash by supplying invalid flags during memory population when translating paging mode is not used. This vulnerability has a CVSS score of 4.7, indicating a medium attack complexity with local access required, leading to a complete system availability loss. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 6.0.2CPE matchmatch criteria | cpe:2.3:a:citrix:xenserver:*:*:*:*:*:*:*:* | ||
4.0.0CPE matchmatch criteria | cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:* | ||
4.1.0CPE matchmatch criteria | cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:* | ||
4.2.0CPE matchmatch criteria | cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:M/Au:N/C:N/I:N/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.