CVE-2012-3433
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU...
CVE-2012-3433 is a medium vulnerability (CVSS 4.9) in Xen, published August 18, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 35th percentile. Fixed in xen 4.1.3-1.
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.
Exploit likelihood
What each source reports
NVD Score used
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.
- Record
CVE-2012-3433- CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.
- Record
CVE-2012-3433- Updated
- 2026-11-02
EUVDEUVD-2012-3400 No score
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.
- Record
EUVD-2012-3400- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4r2q-mgcp-7w6w No score
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU...
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.
- Record
GHSA-4r2q-mgcp-7w6w- Updated
- 2026-11-02
OSV No score
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.
- Record
CVE-2012-3433- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3433 No score
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.
- Record
DEBIAN-CVE-2012-3433- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10196-1 No score
xen-4.7.0_12-1.3 on GA media
These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10196-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xenDebian:12 |
before 4.1.3-1 | 4.1.3-1 |
xenDebian:13 |
before 4.1.3-1 | 4.1.3-1 |
xenDebian:14 |
before 4.1.3-1 | 4.1.3-1 |
xenDebian:6.0 |
before 4.0.1-5.3, plus listed versions 4.0.1-24.0.1-44.0.1-54.0.1-5.14.0.1-5.2 |
4.0.1-5.3 |
xenopenSUSE:Tumbleweed |
before 4.7.0_12-1.3 | 4.7.0_12-1.3 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
debian.org/security/2012/dsa-2531
secunia.com/advisories/55082
openwall.com/lists/oss-security/2012/08/09/3
security.gentoo.org/glsa/glsa-201309-24.xml
lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html
Show 131 moreShow less
securityfocus.com/bid/54942
lists.xen.org/archives/html/xen-devel/2012-08/msg00855.html
nvd.nist.gov/vuln/detail/CVE-2012-3433
github.com/advisories/GHSA-4r2q-mgcp-7w6w
security-tracker.debian.org/tracker/CVE-2012-3433
suse.com/security/cve/CVE-2011-1898