CVE-2012-2625
Fixed in a distro release EPSS <1%
The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1) bzip2 or (2) lzma compressed kernel image.
Products: xen, xen-unstable
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xen | 4.1.3-4 |
| Debian 13 | xen | 4.1.3-4 |
| Debian 14 | xen | 4.1.3-4 |
| Debian 6.0 | xen | 4.0.1-5.7 |
| Red Hat Enterprise Linux 5 | xen | 0:3.0.3-135.el5_8.4 |
| Red Hat Enterprise Linux 5 | xen-debuginfo | 0:3.0.3-135.el5_8.4 |
| Red Hat Enterprise Linux 5 | xen-libs | 0:3.0.3-135.el5_8.4 |
| Red Hat rhel virtualization 5 | xen | 0:3.0.3-135.el5_8.4 |
| Red Hat rhel virtualization 5 | xen-debuginfo | 0:3.0.3-135.el5_8.4 |
| Red Hat rhel virtualization 5 | xen-devel | 0:3.0.3-135.el5_8.4 |
| openSUSE Tumbleweed | xen | 4.7.0_12-1.3 |