Every CVESearch/Get API key

CVE-2012-3496

XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when...

4.7 MediumFix available

CVE-2012-3496 is a medium vulnerability (CVSS 4.7) in Citrix Xenserver, published September 8, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. Fixed in xen 4.1.3-2.

What does this mean?
Severity
4.7 MediumCVSS 2.0, NVD
Exploit chance
0.42%EPSS, 36th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
4.1.3-2xen +3 more

Description

XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.

Exploit likelihood

0.42%Down 1.1 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xen
Debian:12
before 4.1.3-2
4.1.3-2
xen
Debian:13
before 4.1.3-2
4.1.3-2
xen
Debian:14
before 4.1.3-2
4.1.3-2
xen
Debian:6.0
From an advisory covering 2 CVEs
before 4.0.1-5.4, plus listed versions
4.0.1-24.0.1-44.0.1-54.0.1-5.14.0.1-5.24.0.1-5.3
4.0.1-5.4

What each source reports

NVD Score used4.7

XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.

Record
CVE-2012-3496
CVSS 2.0
4.7 MediumAV:L/AC:M/Au:N/C:N/I:N/A:C
Weakness
CWE-16
Updated
2026-11-02
CVE ListNo score

XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.

Record
CVE-2012-3496
Updated
2026-11-02
EUVDEUVD-2012-3452No score

XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.

Record
EUVD-2012-3452
Updated
2026-11-03
GitHub AdvisoriesGHSA-gw25-hcr4-7p5hNo score

XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when...

XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.

Record
GHSA-gw25-hcr4-7p5h
Updated
2026-11-02
OSVNo score

XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.

Record
CVE-2012-3496
Updated
2026-11-02
OSVDEBIAN-CVE-2012-3496No score

XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.

Record
DEBIAN-CVE-2012-3496
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 20 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open