{"id":"CVE-2012-5510","aliases":["DEBIAN-CVE-2012-5510","DSA-2582-1","EUVD-2012-5402","GHSA-9vf6-5gq4-g9w2","SUSE-SU-2015:0940-1","SUSE-SU-2015:0944-1","openSUSE-SU-2024:10196-1"],"status":"published","title":"Xen 4.x, when downgrading the grant table version, does not properly remove the status page from...","description":"Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.","severity":{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00417,"percentile":0.36235,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2012-11-22T17:59:15Z","modified":"2026-10-23T17:47:50Z","fixes":[{"ecosystem":"Debian:12","package":"xen","fixed_in":["4.1.3-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xen","fixed_in":["4.1.3-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xen","fixed_in":["4.1.3-5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-5"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.1-5.5"}]}],"versions":["4.0.1-2","4.0.1-4","4.0.1-5","4.0.1-5.1","4.0.1-5.2","4.0.1-5.3","4.0.1-5.4"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0_12-1.3"}]}],"bundled":124}],"products":[{"vendor":"xen","product":"xen"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2012/12/03/6","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://secunia.com/advisories/55082","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://support.citrix.com/article/CTX135777","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://security.gentoo.org/glsa/glsa-201309-24.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2012/dsa-2582","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/51397","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/51486","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/51487","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/56794","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://secunia.com/advisories/51468","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.osvdb.org/88128","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80478","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5510"},{"url":"https://github.com/advisories/GHSA-9vf6-5gq4-g9w2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-5510","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150940-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/777628","tags":["report"]},{"url":"https://bugzilla.suse.com/789944","tags":["report"]},{"url":"https://bugzilla.suse.com/789945","tags":["report"]},{"url":"https://bugzilla.suse.com/789948","tags":["report"]},{"url":"https://bugzilla.suse.com/789950","tags":["report"]},{"url":"https://bugzilla.suse.com/789951","tags":["report"]},{"url":"https://bugzilla.suse.com/826717","tags":["report"]},{"url":"https://bugzilla.suse.com/880751","tags":["report"]},{"url":"https://bugzilla.suse.com/895798","tags":["report"]},{"url":"https://bugzilla.suse.com/895799","tags":["report"]},{"url":"https://bugzilla.suse.com/895802","tags":["report"]},{"url":"https://bugzilla.suse.com/903850","tags":["report"]},{"url":"https://bugzilla.suse.com/903967","tags":["report"]},{"url":"https://bugzilla.suse.com/903970","tags":["report"]},{"url":"https://bugzilla.suse.com/905465","tags":["report"]},{"url":"https://bugzilla.suse.com/905467","tags":["report"]},{"url":"https://bugzilla.suse.com/906439","tags":["report"]},{"url":"https://bugzilla.suse.com/927967","tags":["report"]},{"url":"https://bugzilla.suse.com/929339","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3456","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150944-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/789940","tags":["report"]},{"url":"https://bugzilla.suse.com/789988","tags":["report"]},{"url":"https://bugzilla.suse.com/792476","tags":["report"]},{"url":"https://bugzilla.suse.com/793927","tags":["report"]},{"url":"https://bugzilla.suse.com/794316","tags":["report"]},{"url":"https://bugzilla.suse.com/797014","tags":["report"]},{"url":"https://bugzilla.suse.com/797031","tags":["report"]},{"url":"https://bugzilla.suse.com/797523","tags":["report"]},{"url":"https://bugzilla.suse.com/798188","tags":["report"]},{"url":"https://bugzilla.suse.com/799694","tags":["report"]},{"url":"https://bugzilla.suse.com/800156","tags":["report"]},{"url":"https://bugzilla.suse.com/800275","tags":["report"]},{"url":"https://bugzilla.suse.com/802690","tags":["report"]},{"url":"https://bugzilla.suse.com/805094","tags":["report"]},{"url":"https://bugzilla.suse.com/806736","tags":["report"]},{"url":"https://bugzilla.suse.com/910441","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0153","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7094","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2012-5510","description":"Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.","status":"published","published":"2012-12-13T11:00:00Z","modified":"2024-08-06T21:05:47.265Z","updated_at":"2026-11-02T14:34:49.600255Z"}],"euvd":[{"id":"EUVD-2012-5402","description":"Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.","status":"published","published":"2012-12-13T11:00:00Z","modified":"2024-08-06T21:05:47Z","updated_at":"2026-11-03T01:56:04.919378Z"}],"ghsa":[{"id":"GHSA-9vf6-5gq4-g9w2","title":"Xen 4.x, when downgrading the grant table version, does not properly remove the status page from...","description":"Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.","status":"published","published":"2022-05-17T01:39:25Z","modified":"2023-02-03T05:05:00Z","updated_at":"2026-11-02T14:53:40.095446Z"}],"nvd":[{"id":"CVE-2012-5510","description":"Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.","status":"published","published":"2012-12-13T11:53:48.29Z","modified":"2026-06-16T23:46:54.863Z","cvss":[{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:16.958223Z"}],"osv":[{"id":"CVE-2012-5510","description":"Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.","status":"published","published":"2012-12-13T11:53:48Z","modified":"2026-04-10T03:43:13.639478Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2012-5510","description":"Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.","status":"published","published":"2012-12-13T11:53:48.29Z","modified":"2026-10-23T17:47:50.966050511Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"DSA-2582-1","title":"xen - denial of service","status":"published","published":"2012-12-07T00:00:00Z","modified":"2026-03-09T01:17:56.543387Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"openSUSE-SU-2024:10196-1","title":"xen-4.7.0_12-1.3 on GA media","description":"These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:39.408456Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2015:0940-1","title":"Security update for Xen","description":"\nThis update fixes the following security issues in Xen:\n\n    * CVE-2012-5510: Grant table version switch list corruption\n      vulnerability (XSA-26)\n    * CVE-2012-5511: Several HVM operations do not validate the range of\n      their inputs (XSA-27)\n    * CVE-2012-5513: XENMEM_exchange may overwrite hypervisor memory\n      (XSA-29)\n    * CVE-2012-5514: Missing unlock in\n      guest_physmap_mark_populate_on_demand() (XSA-30)\n    * CVE-2012-5515: Several memory hypercall operations allow invalid\n      extent order values (XSA-31)\n\nAlso the following fix has been applied:\n\n    * bnc#777628 - guest 'disappears' after live migration\n      Updated block-dmmd script\n\nSecurity Issues references:\n\n    * CVE-2012-5513\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513\u003e\n    * CVE-2012-5514\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514\u003e\n    * CVE-2012-5511\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511\u003e\n    * CVE-2012-5510\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510\u003e\n    * CVE-2012-5515\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515\u003e\n\n","status":"published","published":"2012-11-22T17:59:15Z","modified":"2026-02-04T02:24:40.497699Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0944-1","title":"Security update for Xen","description":"\nXEN has been updated to fix various bugs and security issues:\n\n    * \n\n      CVE-2013-0153: (XSA 36) To avoid an erratum in early hardware, the\n      Xen AMD IOMMU code by default choose to use a single interrupt\n      remapping table for the whole system. This sharing implied that any\n      guest with a passed through PCI device that is bus mastering capable\n      can inject interrupts into other guests, including domain 0. This has\n      been disabled for AMD chipsets not capable of it.\n\n    * \n\n      CVE-2012-6075: qemu: The e1000 had overflows under some conditions,\n      potentially corrupting memory.\n\n    * \n\n      CVE-2013-0154: (XSA 37) Hypervisor crash due to incorrect ASSERT\n      (debug build only)\n\n    * \n\n      CVE-2012-5634: (XSA-33) A VT-d interrupt remapping source validation\n      flaw was fixed.\n\nAlso the following bugs have been fixed:\n\n    * bnc#805094 - xen hot plug attach/detach fails\n    * bnc#802690 - domain locking can prevent a live migration from\n      completing\n    * bnc#797014 - no way to control live migrations\n          o fix logic error in stdiostream_progress\n          o restore logging in xc_save\n          o add options to control migration tunables\n    * bnc#806736: enabling xentrace crashes hypervisor\n    * Upstream patches from Jan 26287-sched-credit-pick-idle.patch\n      26501-VMX-simplify-CR0-update.patch\n      26502-VMX-disable-SMEP-when-not-paging.patch\n      26516-ACPI-parse-table-retval.patch (Replaces\n      CVE-2013-0153-xsa36.patch) 26517-AMD-IOMMU-clear-irtes.patch\n      (Replaces CVE-2013-0153-xsa36.patch)\n      26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch (Replaces\n      CVE-2013-0153-xsa36.patch)\n      26519-AMD-IOMMU-perdev-intremap-default.patch (Replaces\n      CVE-2013-0153-xsa36.patch) 26526-pvdrv-no-devinit.patch\n      26531-AMD-IOMMU-IVHD-special-missing.patch (Replaces\n      CVE-2013-0153-xsa36.patch)\n    * bnc#798188 - Add $network to xend initscript dependencies\n    * bnc#799694 - Unable to dvd or cdrom-boot DomU after xen-tools update\n      Fixed with update to Xen version 4.1.4\n    * bnc#800156 - L3: HP iLo Generate NMI function not working in XEN\n      kernel\n    * Upstream patches from Jan 26404-x86-forward-both-NMI-kinds.patch\n      26427-x86-AMD-enable-WC+.patch\n    * bnc#793927 - Xen VMs with more than 2 disks randomly fail to start\n    * Upstream patches from Jan 26332-x86-compat-show-guest-stack-mfn.patch\n      26333-x86-get_page_type-assert.patch (Replaces\n      CVE-2013-0154-xsa37.patch)\n      26340-VT-d-intremap-verify-legacy-bridge.patch (Replaces\n      CVE-2012-5634-xsa33.patch) 26370-libxc-x86-initial-mapping-fit.patch\n    * Update to Xen 4.1.4 c/s 23432\n    * Update xenpaging.guest-memusage.patch add rule for xenmem to avoid\n      spurious build failures\n    * Upstream patches from Jan 26179-PCI-find-next-cap.patch\n      26183-x86-HPET-masking.patch 26188-x86-time-scale-asm.patch\n      26200-IOMMU-debug-verbose.patch 26203-x86-HAP-dirty-vram-leak.patch\n      26229-gnttab-version-switch.patch (Replaces\n      CVE-2012-5510-xsa26.patch) 26230-x86-HVM-limit-batches.patch\n      (Replaces CVE-2012-5511-xsa27.patch)\n      26231-memory-exchange-checks.patch (Replaces\n      CVE-2012-5513-xsa29.patch) 26232-x86-mark-PoD-error-path.patch\n      (Replaces CVE-2012-5514-xsa30.patch) 26233-memop-order-checks.patch\n      (Replaces CVE-2012-5515-xsa31.patch)\n      26235-IOMMU-ATS-max-queue-depth.patch\n      26272-x86-EFI-makefile-cflags-filter.patch\n      26294-x86-AMD-Fam15-way-access-filter.patch CVE-2013-0154-xsa37.patch\n    * Restore c/s 25751 in 23614-x86_64-EFI-boot.patch. Modify the EFI\n      Makefile to do additional filtering.\n\nSecurity Issue references:\n\n    * CVE-2013-0153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0153\u003e\n    * CVE-2012-6075\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6075\u003e\n    * CVE-2012-5634\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5634\u003e\n\n","status":"published","published":"2013-03-13T11:27:38Z","modified":"2026-02-04T04:06:10.61132Z","updated_at":"2026-11-02T15:53:41.276824Z"}]}}