CVE-2012-5512

LOW 3.2CVE-2012-5512 · Published 13/12/2012 · updated 16/06/2026

In short

CVE-2012-5512 is a LOW (CVSS 3.2) vulnerability affecting xenserver (citrix).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 34.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xenserver citrix	`= 4.1.0`	No fix yet

Description

Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.

References

lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html
lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html
secunia.com/advisories/51397 · Vendor Advisory
secunia.com/advisories/51486 · Vendor Advisory
secunia.com/advisories/51487 · Vendor Advisory
secunia.com/advisories/55082
security.gentoo.org/glsa/glsa-201309-24.xml
support.citrix.com/article/CTX135777 · Patch
openwall.com/lists/oss-security/2012/12/03/7
osvdb.org/88132
securityfocus.com/bid/56799

More vulnerabilities in xenserver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free