CVE-2012-5511

Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image.

• CWE-119

• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
• http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
• http://secunia.com/advisories/51397Vendor Advisory
• http://secunia.com/advisories/51486Vendor Advisory
• http://secunia.com/advisories/51487Vendor Advisory
• http://secunia.com/advisories/55082
• http://security.gentoo.org/glsa/glsa-201309-24.xml
• http://support.citrix.com/article/CTX135777
• http://www.debian.org/security/2013/dsa-2636
• http://www.openwall.com/lists/oss-security/2012/12/03/10
• http://www.osvdb.org/88129
• http://www.securityfocus.com/bid/56796
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80484
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
• http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
• http://secunia.com/advisories/51397Vendor Advisory
• http://secunia.com/advisories/51486Vendor Advisory
• http://secunia.com/advisories/51487Vendor Advisory
• http://secunia.com/advisories/55082
• http://security.gentoo.org/glsa/glsa-201309-24.xml
• http://support.citrix.com/article/CTX135777
• http://www.debian.org/security/2013/dsa-2636
• http://www.openwall.com/lists/oss-security/2012/12/03/10
• http://www.osvdb.org/88129
• http://www.securityfocus.com/bid/56796
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80484

Published

Dec 13, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5505atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows r…
• CVE-2012-5506python_scripts.py in Plone before 4.2.3 and 4.3 before beta …
• CVE-2012-5507AccessControl/AuthEncoding.py in Zope before 2.13.19, as use…
• CVE-2012-5508The error pages in Plone before 4.2.3 and 4.3 before beta 1 …
• CVE-2012-5509aeolus-configserver-setup in the Aeolas Configuration Server…
• CVE-2012-5510Xen 4.x, when downgrading the grant table version, does not …
• CVE-2012-5512Array index error in the HVMOP_set_mem_access handler in Xen…
• CVE-2012-5513The XENMEM_exchange handler in Xen 4.2 and earlier does not …
• CVE-2012-5514The guest_physmap_mark_populate_on_demand function in Xen 4.…
• CVE-2012-5515The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_phy…
• CVE-2012-5516Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.…
• CVE-2012-5517The online_pages function in mm/memory_hotplug.c in the Linu…