UpHeron
All vulnerabilities

Servers and applications

CVE-2012-3432

The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions.

Severity
Low 1.9
Published
3 Dec 2012
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
0.6% in the next 30 daysHigher than 51% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
CWE-264
Attack
Needs local access · No login needed
Attacker can
Slow it down
CVSS vector
AV:L/AC:M/Au:N/C:N/I:N/A:P
Sources
NVD

Affected software

SoftwareAffected versions
XenServers and applications · cpe:o:xen:xen
  • Version 4.2.0
  • Version 4.1.3
  • Version 4.1.2
  • Version 4.1.1
All 11 release lines
  • Version 3.3.0
  • Version 4.0.0
  • Version 4.0.1
  • Version 4.0.2
  • Version 4.0.3
  • Version 4.0.4
  • Version 4.1.0
  • Version 4.1.1
  • Version 4.1.2
  • Version 4.1.3
  • Version 4.2.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2012-3432
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2012-3432