CVE-2012-4544

{"id": "CVE-2012-4544", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-10-31T16:55:05.827", "references": [{"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html", "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html", "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html", "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html", "source": "secalert@redhat.com"}, {"url": "http://osvdb.org/86619", "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2013-0241.html", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/51071", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/51324", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/51352", "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/51413", "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2013/dsa-2636", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/10/26/3", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/56289", "source": "secalert@redhat.com"}, {"url": "http://www.securitytracker.com/id?1027699", "source": "secalert@redhat.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79617", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk."}, {"lang": "es", "value": "El PV domain builder en Xen 4.2 y anteriores, no valida el tama\u00f1o del kernel o del ramdisk(1) antes o (2) despu\u00e9s de la descompresi\u00f3n, lo que permite a administradores locales de los sistemas hu\u00e9sped provocar una denegaci\u00f3n de servicio (consumo de memoria) a trav\u00e9s de un (1)kernel o (2)ramdisk manipulado."}], "lastModified": "2017-08-29T01:32:18.853", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8257076-E3D6-469E-B7EA-FD92DE3C2F44", "versionEndIncluding": "4.2.0"}, {"criteria": "cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D532B60-C8DD-4A2F-9D05-E574D23EB754"}, {"criteria": "cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D83CA8B-8E49-45FA-8FAB-C15052474542"}, {"criteria": "cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27537DF5-7E0F-463F-BA87-46E329EE07AC"}, {"criteria": "cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EA4F978-9145-4FE6-B4F9-15207E52C40A"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}