CVE-2012-5515

The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value.

• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
• http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
• http://lists.xen.org/archives/html/xen-announce/2012-12/msg00001.htmlVendor Advisory
• http://secunia.com/advisories/51397Vendor Advisory
• http://secunia.com/advisories/51468Vendor Advisory
• http://secunia.com/advisories/51486Vendor Advisory
• http://secunia.com/advisories/51487Vendor Advisory
• http://secunia.com/advisories/51495Vendor Advisory
• http://secunia.com/advisories/55082
• http://security.gentoo.org/glsa/glsa-201309-24.xml
• http://support.citrix.com/article/CTX135777
• http://www.debian.org/security/2012/dsa-2582
• http://www.openwall.com/lists/oss-security/2012/12/03/9
• http://www.osvdb.org/88127
• http://www.securityfocus.com/bid/56798
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80479
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html
• http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html
• http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
• http://lists.xen.org/archives/html/xen-announce/2012-12/msg00001.htmlVendor Advisory
• http://secunia.com/advisories/51397Vendor Advisory
• http://secunia.com/advisories/51468Vendor Advisory
• http://secunia.com/advisories/51486Vendor Advisory
• http://secunia.com/advisories/51487Vendor Advisory
• http://secunia.com/advisories/51495Vendor Advisory
• http://secunia.com/advisories/55082
• http://security.gentoo.org/glsa/glsa-201309-24.xml
• http://support.citrix.com/article/CTX135777
• http://www.debian.org/security/2012/dsa-2582
• http://www.openwall.com/lists/oss-security/2012/12/03/9
• http://www.osvdb.org/88127
• http://www.securityfocus.com/bid/56798
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80479

Published

Dec 13, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5509aeolus-configserver-setup in the Aeolas Configuration Server…
• CVE-2012-5510Xen 4.x, when downgrading the grant table version, does not …
• CVE-2012-5511Stack-based buffer overflow in the dirty video RAM tracking …
• CVE-2012-5512Array index error in the HVMOP_set_mem_access handler in Xen…
• CVE-2012-5513The XENMEM_exchange handler in Xen 4.2 and earlier does not …
• CVE-2012-5514The guest_physmap_mark_populate_on_demand function in Xen 4.…
• CVE-2012-5516Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.…
• CVE-2012-5517The online_pages function in mm/memory_hotplug.c in the Linu…
• CVE-2012-5518vdsm: certificate generation upon node creation allowing vds…7.5
• CVE-2012-5519CUPS 1.4.4, when running in certain Linux distributions such…
• CVE-2012-5520The send_to_sourcefire function in manage_sql.c in OpenVAS M…
• CVE-2012-5521quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d…6.5