CVE-2012-5512

Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.

• CWE-16

• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
• http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html
• http://secunia.com/advisories/51397Vendor Advisory
• http://secunia.com/advisories/51486Vendor Advisory
• http://secunia.com/advisories/51487Vendor Advisory
• http://secunia.com/advisories/55082
• http://security.gentoo.org/glsa/glsa-201309-24.xml
• http://support.citrix.com/article/CTX135777Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/12/03/7
• http://www.osvdb.org/88132
• http://www.securityfocus.com/bid/56799
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80481
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
• http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html
• http://secunia.com/advisories/51397Vendor Advisory
• http://secunia.com/advisories/51486Vendor Advisory
• http://secunia.com/advisories/51487Vendor Advisory
• http://secunia.com/advisories/55082
• http://security.gentoo.org/glsa/glsa-201309-24.xml
• http://support.citrix.com/article/CTX135777Patch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/12/03/7
• http://www.osvdb.org/88132
• http://www.securityfocus.com/bid/56799
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80481

Published

Dec 13, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5506python_scripts.py in Plone before 4.2.3 and 4.3 before beta …
• CVE-2012-5507AccessControl/AuthEncoding.py in Zope before 2.13.19, as use…
• CVE-2012-5508The error pages in Plone before 4.2.3 and 4.3 before beta 1 …
• CVE-2012-5509aeolus-configserver-setup in the Aeolas Configuration Server…
• CVE-2012-5510Xen 4.x, when downgrading the grant table version, does not …
• CVE-2012-5511Stack-based buffer overflow in the dirty video RAM tracking …
• CVE-2012-5513The XENMEM_exchange handler in Xen 4.2 and earlier does not …
• CVE-2012-5514The guest_physmap_mark_populate_on_demand function in Xen 4.…
• CVE-2012-5515The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_phy…
• CVE-2012-5516Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.…
• CVE-2012-5517The online_pages function in mm/memory_hotplug.c in the Linu…
• CVE-2012-5518vdsm: certificate generation upon node creation allowing vds…7.5