CVE-2012-0218
Fixed in a distro release EPSS <1%
Xen 3.4, 4.0, and 4.1, when the guest OS has not registered a handler for a syscall or sysenter instruction, does not properly clear a flag for exception injection when injecting a General Protection Fault, which allows local PV guest OS users to cause a denial of service (guest crash) by later triggering an exception that would normally be handled within Xen.
Products: xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xen | 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1 |
| Debian 13 | xen | 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1 |
| Debian 14 | xen | 4.1.3~rc1+hg-20120614.a9c0a89c08f2-1 |
| Debian 6.0 | xen | 4.0.1-5.2 |