{"id":"CVE-2012-5512","aliases":["DEBIAN-CVE-2012-5512","EUVD-2012-5404","GHSA-2ccw-9fqf-xvp4","SUSE-SU-2015:0944-1"],"status":"published","title":"Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS...","description":"Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.","severity":{"version":"2.0","score":3.2,"vector":"AV:L/AC:L/Au:S/C:P/I:N/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00406,"percentile":0.35138,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-16"],"published":"2012-12-13T11:00:00Z","modified":"2026-10-23T17:47:38Z","fixes":[{"ecosystem":"Debian:12","package":"xen","fixed_in":["4.1.3-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xen","fixed_in":["4.1.3-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xen","fixed_in":["4.1.3-5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.3-5"}]}]}],"products":[{"vendor":"citrix","product":"xenserver"}],"references":[{"url":"http://secunia.com/advisories/55082","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/56799","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://support.citrix.com/article/CTX135777","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://security.gentoo.org/glsa/glsa-201309-24.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/51397","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/12/03/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/51486","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/51487","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80481","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.osvdb.org/88132","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5512"},{"url":"https://github.com/advisories/GHSA-2ccw-9fqf-xvp4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2012-5512","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150944-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/777628","tags":["report"]},{"url":"https://bugzilla.suse.com/789940","tags":["report"]},{"url":"https://bugzilla.suse.com/789944","tags":["report"]},{"url":"https://bugzilla.suse.com/789945","tags":["report"]},{"url":"https://bugzilla.suse.com/789948","tags":["report"]},{"url":"https://bugzilla.suse.com/789950","tags":["report"]},{"url":"https://bugzilla.suse.com/789951","tags":["report"]},{"url":"https://bugzilla.suse.com/789988","tags":["report"]},{"url":"https://bugzilla.suse.com/792476","tags":["report"]},{"url":"https://bugzilla.suse.com/793927","tags":["report"]},{"url":"https://bugzilla.suse.com/794316","tags":["report"]},{"url":"https://bugzilla.suse.com/797014","tags":["report"]},{"url":"https://bugzilla.suse.com/797031","tags":["report"]},{"url":"https://bugzilla.suse.com/797523","tags":["report"]},{"url":"https://bugzilla.suse.com/798188","tags":["report"]},{"url":"https://bugzilla.suse.com/799694","tags":["report"]},{"url":"https://bugzilla.suse.com/800156","tags":["report"]},{"url":"https://bugzilla.suse.com/800275","tags":["report"]},{"url":"https://bugzilla.suse.com/802690","tags":["report"]},{"url":"https://bugzilla.suse.com/805094","tags":["report"]},{"url":"https://bugzilla.suse.com/806736","tags":["report"]},{"url":"https://bugzilla.suse.com/910441","tags":["report"]},{"url":"https://bugzilla.suse.com/927967","tags":["report"]},{"url":"https://bugzilla.suse.com/929339","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3456","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2012-5512","description":"Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.","status":"published","published":"2012-12-13T11:00:00Z","modified":"2024-08-06T21:05:47.308Z","updated_at":"2026-11-02T14:34:49.246229Z"}],"euvd":[{"id":"EUVD-2012-5404","description":"Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.","status":"published","published":"2012-12-13T11:00:00Z","modified":"2024-08-06T21:05:47Z","updated_at":"2026-11-03T01:56:04.919378Z"}],"ghsa":[{"id":"GHSA-2ccw-9fqf-xvp4","title":"Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS...","description":"Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.","status":"published","published":"2022-05-17T01:39:25Z","modified":"2023-02-03T05:05:00Z","updated_at":"2026-11-02T14:53:40.095446Z"}],"nvd":[{"id":"CVE-2012-5512","description":"Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.","status":"published","published":"2012-12-13T11:53:48.4Z","modified":"2026-06-16T23:46:55.143Z","cvss":[{"version":"2.0","score":3.2,"vector":"AV:L/AC:L/Au:S/C:P/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-16"],"updated_at":"2026-11-02T14:02:16.958223Z"}],"osv":[{"id":"CVE-2012-5512","description":"Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.","status":"published","published":"2012-12-13T11:53:48Z","modified":"2026-04-10T03:44:19.965303Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2012-5512","description":"Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.","status":"published","published":"2012-12-13T11:53:48.4Z","modified":"2026-10-23T17:47:38.455760718Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"SUSE-SU-2015:0944-1","title":"Security update for Xen","description":"\nXEN has been updated to fix various bugs and security issues:\n\n    * \n\n      CVE-2013-0153: (XSA 36) To avoid an erratum in early hardware, the\n      Xen AMD IOMMU code by default choose to use a single interrupt\n      remapping table for the whole system. This sharing implied that any\n      guest with a passed through PCI device that is bus mastering capable\n      can inject interrupts into other guests, including domain 0. This has\n      been disabled for AMD chipsets not capable of it.\n\n    * \n\n      CVE-2012-6075: qemu: The e1000 had overflows under some conditions,\n      potentially corrupting memory.\n\n    * \n\n      CVE-2013-0154: (XSA 37) Hypervisor crash due to incorrect ASSERT\n      (debug build only)\n\n    * \n\n      CVE-2012-5634: (XSA-33) A VT-d interrupt remapping source validation\n      flaw was fixed.\n\nAlso the following bugs have been fixed:\n\n    * bnc#805094 - xen hot plug attach/detach fails\n    * bnc#802690 - domain locking can prevent a live migration from\n      completing\n    * bnc#797014 - no way to control live migrations\n          o fix logic error in stdiostream_progress\n          o restore logging in xc_save\n          o add options to control migration tunables\n    * bnc#806736: enabling xentrace crashes hypervisor\n    * Upstream patches from Jan 26287-sched-credit-pick-idle.patch\n      26501-VMX-simplify-CR0-update.patch\n      26502-VMX-disable-SMEP-when-not-paging.patch\n      26516-ACPI-parse-table-retval.patch (Replaces\n      CVE-2013-0153-xsa36.patch) 26517-AMD-IOMMU-clear-irtes.patch\n      (Replaces CVE-2013-0153-xsa36.patch)\n      26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch (Replaces\n      CVE-2013-0153-xsa36.patch)\n      26519-AMD-IOMMU-perdev-intremap-default.patch (Replaces\n      CVE-2013-0153-xsa36.patch) 26526-pvdrv-no-devinit.patch\n      26531-AMD-IOMMU-IVHD-special-missing.patch (Replaces\n      CVE-2013-0153-xsa36.patch)\n    * bnc#798188 - Add $network to xend initscript dependencies\n    * bnc#799694 - Unable to dvd or cdrom-boot DomU after xen-tools update\n      Fixed with update to Xen version 4.1.4\n    * bnc#800156 - L3: HP iLo Generate NMI function not working in XEN\n      kernel\n    * Upstream patches from Jan 26404-x86-forward-both-NMI-kinds.patch\n      26427-x86-AMD-enable-WC+.patch\n    * bnc#793927 - Xen VMs with more than 2 disks randomly fail to start\n    * Upstream patches from Jan 26332-x86-compat-show-guest-stack-mfn.patch\n      26333-x86-get_page_type-assert.patch (Replaces\n      CVE-2013-0154-xsa37.patch)\n      26340-VT-d-intremap-verify-legacy-bridge.patch (Replaces\n      CVE-2012-5634-xsa33.patch) 26370-libxc-x86-initial-mapping-fit.patch\n    * Update to Xen 4.1.4 c/s 23432\n    * Update xenpaging.guest-memusage.patch add rule for xenmem to avoid\n      spurious build failures\n    * Upstream patches from Jan 26179-PCI-find-next-cap.patch\n      26183-x86-HPET-masking.patch 26188-x86-time-scale-asm.patch\n      26200-IOMMU-debug-verbose.patch 26203-x86-HAP-dirty-vram-leak.patch\n      26229-gnttab-version-switch.patch (Replaces\n      CVE-2012-5510-xsa26.patch) 26230-x86-HVM-limit-batches.patch\n      (Replaces CVE-2012-5511-xsa27.patch)\n      26231-memory-exchange-checks.patch (Replaces\n      CVE-2012-5513-xsa29.patch) 26232-x86-mark-PoD-error-path.patch\n      (Replaces CVE-2012-5514-xsa30.patch) 26233-memop-order-checks.patch\n      (Replaces CVE-2012-5515-xsa31.patch)\n      26235-IOMMU-ATS-max-queue-depth.patch\n      26272-x86-EFI-makefile-cflags-filter.patch\n      26294-x86-AMD-Fam15-way-access-filter.patch CVE-2013-0154-xsa37.patch\n    * Restore c/s 25751 in 23614-x86_64-EFI-boot.patch. Modify the EFI\n      Makefile to do additional filtering.\n\nSecurity Issue references:\n\n    * CVE-2013-0153\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0153\u003e\n    * CVE-2012-6075\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6075\u003e\n    * CVE-2012-5634\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5634\u003e\n\n","status":"published","published":"2013-03-13T11:27:38Z","modified":"2026-02-04T04:06:10.61132Z","updated_at":"2026-11-02T15:53:41.276824Z"}]}}