CVE-2012-3494
The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix...
The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service (host crash) by writing to the reserved bits of the DR7 debug control register.
Exploit likelihood
What each source reports
NVD Score used
The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service (host crash) by writing to the reserved bits of the DR7 debug control register.
- Record
CVE-2012-3494- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service (host crash) by writing to the reserved bits of the DR7 debug control register.
- Record
CVE-2012-3494- Updated
- 2026-11-02
EUVDEUVD-2012-3450 No score
The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service (host crash) by writing to the reserved bits of the DR7 debug control register.
- Record
EUVD-2012-3450- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6p48-jg39-2mq7 No score
The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix...
The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service (host crash) by writing to the reserved bits of the DR7 debug control register.
- Record
GHSA-6p48-jg39-2mq7- Updated
- 2026-11-02
OSV No score
The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service (host crash) by writing to the reserved bits of the DR7 debug control register.
- Record
CVE-2012-3494- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3494 No score
The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service (host crash) by writing to the reserved bits of the DR7 debug control register.
- Record
DEBIAN-CVE-2012-3494- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3494 is a low vulnerability (CVSS 2.1) in Citrix Xenserver, published September 8, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in xen 4.1.3-2.
References
secunia.com/advisories/55082
security.gentoo.org/glsa/glsa-201309-24.xml
lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html
wiki.xen.org/wiki/Security_Announcements
Show 22 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=851139
securityfocus.com/bid/55400
openwall.com/lists/oss-security/2012/09/05/5
exchange.xforce.ibmcloud.com/vulnerabilities/78265
support.citrix.com/article/CTX134708
lists.xen.org/archives/html/xen-announce/2012-09/msg00000.html
osvdb.org/85197
securitytracker.com/id?1027479
debian.org/security/2012/dsa-2544
nvd.nist.gov/vuln/detail/CVE-2012-3494
github.com/advisories/GHSA-6p48-jg39-2mq7
security-tracker.debian.org/tracker/CVE-2012-3494