CVE-2012-5510

Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.

• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
• http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
• http://secunia.com/advisories/51397Vendor Advisory
• http://secunia.com/advisories/51468Vendor Advisory
• http://secunia.com/advisories/51486Vendor Advisory
• http://secunia.com/advisories/51487Vendor Advisory
• http://secunia.com/advisories/55082
• http://security.gentoo.org/glsa/glsa-201309-24.xml
• http://support.citrix.com/article/CTX135777
• http://www.debian.org/security/2012/dsa-2582
• http://www.openwall.com/lists/oss-security/2012/12/03/6
• http://www.osvdb.org/88128
• http://www.securityfocus.com/bid/56794
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80478
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
• http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
• http://secunia.com/advisories/51397Vendor Advisory
• http://secunia.com/advisories/51468Vendor Advisory
• http://secunia.com/advisories/51486Vendor Advisory
• http://secunia.com/advisories/51487Vendor Advisory
• http://secunia.com/advisories/55082
• http://security.gentoo.org/glsa/glsa-201309-24.xml
• http://support.citrix.com/article/CTX135777
• http://www.debian.org/security/2012/dsa-2582
• http://www.openwall.com/lists/oss-security/2012/12/03/6
• http://www.osvdb.org/88128
• http://www.securityfocus.com/bid/56794
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80478

Published

Dec 13, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5504Cross-site scripting (XSS) vulnerability in widget_traversal…
• CVE-2012-5505atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows r…
• CVE-2012-5506python_scripts.py in Plone before 4.2.3 and 4.3 before beta …
• CVE-2012-5507AccessControl/AuthEncoding.py in Zope before 2.13.19, as use…
• CVE-2012-5508The error pages in Plone before 4.2.3 and 4.3 before beta 1 …
• CVE-2012-5509aeolus-configserver-setup in the Aeolas Configuration Server…
• CVE-2012-5511Stack-based buffer overflow in the dirty video RAM tracking …
• CVE-2012-5512Array index error in the HVMOP_set_mem_access handler in Xen…
• CVE-2012-5513The XENMEM_exchange handler in Xen 4.2 and earlier does not …
• CVE-2012-5514The guest_physmap_mark_populate_on_demand function in Xen 4.…
• CVE-2012-5515The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_phy…
• CVE-2012-5516Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.…