CVE-2012-6333

Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input.

• CWE-399

• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
• http://secunia.com/advisories/51397Vendor Advisory
• http://secunia.com/advisories/51486Vendor Advisory
• http://secunia.com/advisories/51487Vendor Advisory
• http://secunia.com/advisories/55082
• http://security.gentoo.org/glsa/glsa-201309-24.xml
• http://support.citrix.com/article/CTX135777
• http://www.openwall.com/lists/oss-security/2012/12/03/10
• http://www.osvdb.org/88129
• http://www.securityfocus.com/bid/56796
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80484
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
• http://secunia.com/advisories/51397Vendor Advisory
• http://secunia.com/advisories/51486Vendor Advisory
• http://secunia.com/advisories/51487Vendor Advisory
• http://secunia.com/advisories/55082
• http://security.gentoo.org/glsa/glsa-201309-24.xml
• http://support.citrix.com/article/CTX135777
• http://www.openwall.com/lists/oss-security/2012/12/03/10
• http://www.osvdb.org/88129
• http://www.securityfocus.com/bid/56796
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80484

Published

Dec 13, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-6325VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 d…
• CVE-2012-6326VMware vCenter Server 4.1 before Update 3 and 5.0 before Upd…
• CVE-2012-6327Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-6328Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-6329The _compile function in Maketext.pm in the Locale::Maketext…
• CVE-2012-6330The localization functionality in TWiki before 5.1.3, and Fo…
• CVE-2012-6334The Track My Mobile feature in the SamsungDive subsystem for…
• CVE-2012-6335The Anti-theft service in AVG AntiVirus for Android allows p…
• CVE-2012-6336The Missing Device feature in Lookout allows physically prox…
• CVE-2012-6337The Track My Mobile feature in the SamsungDive subsystem for…
• CVE-2012-6339Multiple cross-site scripting (XSS) vulnerabilities in the a…
• CVE-2012-6340An Authentication vulnerability exists in NETGEAR WGR614 v7 …4.6