CVE-2012-4411
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain...
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.
Exploit likelihood
What each source reports
NVD Score used
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.
- Record
CVE-2012-4411- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:S/C:C/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.
- Record
CVE-2012-4411- Updated
- 2026-11-02
EUVDEUVD-2012-4348 No score
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.
- Record
EUVD-2012-4348- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9p2j-vm53-43vm No score
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain...
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.
- Record
GHSA-9p2j-vm53-43vm- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.
- Record
CVE-2012-4411- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4411 No score
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.
- Record
DEBIAN-CVE-2012-4411- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10196-1 No score
xen-4.7.0_12-1.3 on GA media
These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10196-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xenDebian:12 |
before 4.1.3-2 | 4.1.3-2 |
xenDebian:13 |
before 4.1.3-2 | 4.1.3-2 |
xenDebian:14 |
before 4.1.3-2 | 4.1.3-2 |
xen-qemu-dm-4.0Debian:6.0 |
before 4.0.1-2+squeeze2, plus listed versions 4.0.1-24.0.1-2+squeeze1 |
4.0.1-2+squeeze2 |
xenopenSUSE:Tumbleweed |
before 4.7.0_12-1.3 | 4.7.0_12-1.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-4411 is a medium vulnerability (CVSS 4.6) in Xen, published September 8, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in xen 4.1.3-2.
References
secunia.com/advisories/55082
security.gentoo.org/glsa/glsa-201309-24.xml
lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html
debian.org/security/2012/dsa-2543
lists.xen.org/archives/html/xen-announce/2012-09/msg00007.html
Show 140 moreShow less
openwall.com/lists/oss-security/2012/09/06/2
securityfocus.com/bid/55442
nvd.nist.gov/vuln/detail/CVE-2012-4411
github.com/advisories/GHSA-9p2j-vm53-43vm
security-tracker.debian.org/tracker/CVE-2012-4411
suse.com/security/cve/CVE-2011-1898