Denial of Service Vulnerability in Citrix XenServer and Xen Hypervisors
CVE-2012-3494

Currently unrated

Key Information:

Vendor: Xen Project
Status: Xen; Xenserver
Vendor: CVE Published:; 23 November 2012

🔔 Create Xen Project Vulnerability Alert

What is CVE-2012-3494?

The vulnerability allows local OS guest users on x86-64 systems to exploit the set_debugreg hypercall in Xen and Citrix XenServer platforms. By writing to reserved bits of the DR7 debug control register, an attacker can trigger a denial of service, leading to a host crash. This serious flaw compromises system stability and may provide a gateway for further attacks, emphasizing the need for immediate mitigation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch