Servers and applications
CVE-2012-4544
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
- Severity
- Low 2.1
- Published
- 31 Oct 2012
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 0.4% in the next 30 daysHigher than 36% of CVEs. EPSS by FIRST, 12 Nov 2026
- Attack
- Needs local access · No login needed
- Attacker can
- Slow it down
- CVSS vector
AV:L/AC:L/Au:N/C:N/I:N/A:P- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
XenServers and applications · cpe:o:xen:xen |
|