Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-0218

Fixed in a distro release EPSS <1%

Xen 3.4, 4.0, and 4.1, when the guest OS has not registered a handler for a syscall or sysenter instruction, does not properly clear a flag for exception injection when injecting a General Protection Fault, which allows local PV guest OS users to cause a denial of service (guest crash) by later triggering an exception that would normally be handled within Xen.

Published 2012-12-03 · CVE record · OSV

Products: xen

Distro releases

ReleasePackageFixed in
Debian 12xen4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
Debian 13xen4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
Debian 14xen4.1.3~rc1+hg-20120614.a9c0a89c08f2-1
Debian 6.0xen4.0.1-5.2