Every CVESearch/Get API key

CVE-2012-3433

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU...

4.9 MediumFix available

CVE-2012-3433 is a medium vulnerability (CVSS 4.9) in Xen, published August 18, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in xen 4.1.3-1.

What does this mean?
Severity
4.9 MediumCVSS 2.0, NVD
Exploit chance
0.42%EPSS, 36th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
4.1.3-1xen +4 more

Description

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.

Exploit likelihood

0.42%Down 0.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xen
Debian:12
before 4.1.3-1
4.1.3-1
xen
Debian:13
before 4.1.3-1
4.1.3-1
xen
Debian:14
before 4.1.3-1
4.1.3-1
xen
Debian:6.0
From an advisory covering 2 CVEs
before 4.0.1-5.3, plus listed versions
4.0.1-24.0.1-44.0.1-54.0.1-5.14.0.1-5.2
4.0.1-5.3
xen
openSUSE:Tumbleweed
From an advisory covering 124 CVEs
before 4.7.0_12-1.3
4.7.0_12-1.3

What each source reports

NVD Score used4.9

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.

Record
CVE-2012-3433
CVSS 2.0
4.9 MediumAV:L/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-399
Updated
2026-11-02
CVE ListNo score

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.

Record
CVE-2012-3433
Updated
2026-11-02
EUVDEUVD-2012-3400No score

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.

Record
EUVD-2012-3400
Updated
2026-11-03
GitHub AdvisoriesGHSA-4r2q-mgcp-7w6wNo score

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU...

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.

Record
GHSA-4r2q-mgcp-7w6w
Updated
2026-11-02
OSVNo score

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.

Record
CVE-2012-3433
Updated
2026-11-02
OSVDEBIAN-CVE-2012-3433No score

Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.

Record
DEBIAN-CVE-2012-3433
Updated
2026-11-02
OSVopenSUSE-SU-2024:10196-1No score

xen-4.7.0_12-1.3 on GA media

These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10196-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 131 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open