CVE-2012-2625

The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1) bzip2 or (2) lzma compressed kernel image.

• CWE-20

• http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1817Broken Link
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00024.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1130.htmlThird Party Advisory
• http://secunia.com/advisories/49184Third Party Advisory
• http://secunia.com/advisories/51413Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/10/26/3Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/53650Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1027090Third Party Advisory, VDB Entry
• http://xenbits.xensource.com/hg/xen-unstable.hg/rev/60f09d1ab1feVendor Advisory
• http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1817Broken Link
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00024.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1130.htmlThird Party Advisory
• http://secunia.com/advisories/49184Third Party Advisory
• http://secunia.com/advisories/51413Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/10/26/3Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/53650Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1027090Third Party Advisory, VDB Entry
• http://xenbits.xensource.com/hg/xen-unstable.hg/rev/60f09d1ab1feVendor Advisory

Published

Oct 31, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2611The DiagTraceR3Info function in the Dialog processor in disp…
• CVE-2012-2612The DiagTraceHex function in disp+work.exe 7010.29.15.58313 …
• CVE-2012-2614Buffer overflow in programmer.exe in Lattice Diamond Program…
• CVE-2012-2615Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2012-2619The Broadcom BCM4325 and BCM4329 Wi-Fi chips, as used in cer…
• CVE-2012-2624Stack-based buffer overflow in Logica HotScan allows remote …
• CVE-2012-2626cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (…
• CVE-2012-2627d4d/uploader.php in the web console in Plixer Scrutinizer (a…
• CVE-2012-2629Multiple cross-site request forgery (CSRF) and cross-site sc…8.8
• CVE-2012-2630The Puella Magi Madoka Magica iP application 1.05 and earlie…
• CVE-2012-2631Cross-site scripting (XSS) vulnerability in WEBLOGIC @WEB Sh…
• CVE-2012-2632SEIL routers with firmware SEIL/x86 1.00 through 2.35, SEIL/…