Denial of Service Vulnerability in Xen and Citrix XenServer

CVE-2012-3498

Summary

The vulnerability allows local HVM guest OS kernels to exploit a weakness within the PHYSDEVOP_map_pirq component, potentially leading to a denial of service through host crashes. Furthermore, the absence of adequate range checks may enable unauthorized access to hypervisor or guest memory. This poses significant risks for systems employing Xen 4.1, 4.2 and Citrix XenServer 6.0.2 and earlier versions.

References