© 2026 vulntracker.io

CVE-2012-6036

N/A

Published: November 23, 2012 at 08:00 PM UTC

Updated: June 16, 2026 at 11:47 PM UTC

1 product affected across 1 vendorXen

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.4%

Description

The (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 do not check for negative id pools, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or possibly execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Xen · Xenwordpress-plugin

95%

4.0.0 4.1.0 4.2.0

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (12)

Mailing Listx_refsource_MLISTVendor Advisory

Source: [email protected]

http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html

VDB Entryx_refsource_OSVDB

Source: [email protected]

http://osvdb.org/85199

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/50472

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/55082

Vendor Advisoryx_refsource_GENTOO

Source: [email protected]

http://security.gentoo.org/glsa/glsa-201309-24.xml

x_refsource_CONFIRM

Source: [email protected]

http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities

Mailing Listx_refsource_MLIST

Source: [email protected]

http://www.openwall.com/lists/oss-security/2012/09/05/8

VDB Entryx_refsource_BID

Source: [email protected]

http://www.securityfocus.com/bid/55410

CVSS

4.4MEDIUM[email protected]

Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-264

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card