VYPR
Unrated severityNVD Advisory· Published Oct 31, 2012· Updated Jun 16, 2026

CVE-2012-4544

CVE-2012-4544

Description

The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Xen/Xen6 versions
    cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*range: <=4.2.0
    • cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*
    • (no CPE)range: <=4.2

Patches

Vulnerability mechanics

References

21

News mentions

0

No linked articles in our index yet.