Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.1

Xen 4.0‑4.2 guests can crash host with malformed request

CVE-2012-4539 · published 13 years ago
Summary

If you run 32‑bit virtual machines on a 64‑bit Xen server version 4.0 to 4.2, a guest administrator can send a specially crafted request that puts the hypervisor into an endless loop, causing the server to hang or restart. This stops all workloads on that host until it is rebooted. Upgrade Xen to a newer release or apply the vendor’s patch to stop the condition from being triggered.

What to do
  • Update debian xen to version 4.1.3-4.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian xen < 4.1.3-4
Fix: upgrade to 4.1.3-4
Debian:13 debian xen < 4.1.3-4
Fix: upgrade to 4.1.3-4
Debian:14 debian xen < 4.1.3-4
Fix: upgrade to 4.1.3-4
– xen xen 4.1.2
4.0.0
4.0.1
4.0.2
4.0.3
4.0.4
4.1.0
4.1.1
4.1.3
4.2.0
cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*
Original advisory text
Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid argumen...
Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vulnerability."
References
Severity
2.1 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published21 Nov 2012
Updated4 Nov 2026
First seen5 Sep 2026
Sources
DEBIAN-CVE-2012-4539 · OSV
CVE-2012-4539 · NVD
Track software like this
Free during beta