deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-5836
Published: 2012-11-21
Description: Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving the setting of Cascading Style Sheets (CSS) properties in conjunction with SVG text.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html; http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html
CVE: CVE-2012-5837
Published: 2012-11-21
Description: The Web Developer Toolbar in Mozilla Firefox before 17.0 executes script with chrome privileges, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79, CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html; http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html
CVE: CVE-2012-5838
Published: 2012-11-21
Description: The copyTexImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via large image dimensions.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html; http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html
CVE: CVE-2012-5839
Published: 2012-11-21
Description: Heap-based buffer overflow in the gfxShapedWord::CompressedGlyph::IsClusterStart function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html; http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html
CVE: CVE-2012-5840
Published: 2012-11-21
Description: Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-4214.
CVSS Score: 9.3 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html; http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html
CVE: CVE-2012-5841
Published: 2012-11-21
Description: Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 implement cross-origin wrappers with a filtering behavior that does not properly restrict write actions, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html; http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html
CVE: CVE-2012-5842
Published: 2012-11-21
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html; http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html
CVE: CVE-2012-5843
Published: 2012-11-21
Description: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html; http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html; http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html
CVE: CVE-2012-3512
Published: 2012-11-21
Description: Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684075; http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086375.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088239.html
CVE: CVE-2012-3513
Published: 2012-11-21
Description: munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684076; http://www.munin-monitoring.org/ticket/1238; http://www.openwall.com/lists/oss-security/2012/08/21/1
CVE: CVE-2012-4409
Published: 2012-11-21
Description: Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-September/086519.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-September/087542.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088281.html
CVE: CVE-2012-4426
Published: 2012-11-21
Description: Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors involving (1) errors.c or (2) mcrypt.c.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-134
References: http://www.openwall.com/lists/oss-security/2012/09/06/8; http://www.openwall.com/lists/oss-security/2012/09/06/9; http://www.openwall.com/lists/oss-security/2012/09/10/5
CVE: CVE-2012-4527
Published: 2012-11-21
Description: Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name.  NOTE: it is not clear whether this is a vulnerability.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091173.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091206.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091377.html
CVE: CVE-2012-4535
Published: 2012-11-21
Description: Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline."
CVSS Score: 1.9 (LOW)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
CVE: CVE-2012-4536
Published: 2012-11-21
Description: The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service (Xen crash) via a crafted pirq value that triggers an out-of-bounds read.
CVSS Score: 2.1 (LOW)
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
CVE: CVE-2012-4537
Published: 2012-11-21
Description: Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability."
CVSS Score: 2.1 (LOW)
CWE: CWE-16
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
CVE: CVE-2012-4539
Published: 2012-11-21
Description: Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vulnerability."
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
CVE: CVE-2012-5526
Published: 2012-11-21
Description: CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://cpansearch.perl.org/src/MARKSTOS/CGI.pm-3.63/Changes; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
CVE: CVE-2012-2084
Published: 2012-11-22
Description: Cross-site scripting (XSS) vulnerability in the Printer, email and PDF versions module 6.x-1.x before 6.x-1.15 and 7.x-1.x before 7.x-1.0 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably the PATH_INFO.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/1515060; http://drupal.org/node/1515076; http://drupal.org/node/1515722
CVE: CVE-2012-2211
Published: 2012-11-22
Description: Cross-site scripting (XSS) vulnerability in phpgwapi/inc/common_functions_inc.php in eGroupware before 1.8[PII_REDACTED]5 allows remote attackers to inject arbitrary web script or HTML via the menuaction parameter to etemplate/process_exec.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/111626/egroupware-xss.txt; http://secunia.com/advisories/48703; http://www.egroupware.org/changelog
CVE: CVE-2012-5173
Published: 2012-11-23
Description: Session fixation vulnerability in BIGACE before 2.7.8 allows remote attackers to hijack web sessions via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://jvn.jp/en/jp/JVN60931933/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000104; http://secunia.com/advisories/51355
CVE: CVE-2012-5756
Published: 2012-11-23
Description: The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2, when a collective configuration is enabled, has a single secret key that is shared across different customers' installations, which allows remote attackers to spoof a container server by (1) sniffing the network to locate a cleartext transmission of this key or (2) leveraging knowledge of this key from another installation.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://secunia.com/advisories/51319; http://www-01.ibm.com/support/docview.wss?uid=swg1PM68926; http://www-01.ibm.com/support/docview.wss?uid=swg21615783
CVE: CVE-2012-5758
Published: 2012-11-23
Description: The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 does not require authentication for an unspecified interface, which allows remote attackers to cause a denial of service (process exit) via unknown vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/51319; http://www-01.ibm.com/support/docview.wss?uid=swg1IC86908; http://www-01.ibm.com/support/docview.wss?uid=swg21615783
CVE: CVE-2012-5759
Published: 2012-11-23
Description: The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 allows remote authenticated users to bypass intended administrative-role requirements and perform arbitrary JMX operations via unspecified vectors.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://osvdb.org/87620; http://secunia.com/advisories/51319; http://www-01.ibm.com/support/docview.wss?uid=swg1IC85748
CVE: CVE-2012-5861
Published: 2012-11-23
Description: These Sinapsi devices do not check the validity of the data before 
executing queries. By accessing the SQL table of certain pages that do 
not require authentication within the device, attackers can leak 
information from the device. This could allow the attacker to compromise
 confidentiality.
CVSS Score: 7.8 (HIGH)
CWE: CWE-89, CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html; http://www.exploit-db.com/exploits/21273/; http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
CVE: CVE-2012-5862
Published: 2012-11-23
Description: These Sinapsi devices
store hard-coded passwords in the PHP file of the device. By using the 
hard-coded passwords in the device, attackers can log into the device 
with administrative privileges. This could allow the attacker to have 
unauthorized access.
CVSS Score: 10.0 (HIGH)
CWE: CWE-259, CWE-310
References: http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html; http://www.exploit-db.com/exploits/21273/; http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
CVE: CVE-2012-5863
Published: 2012-11-23
Description: These Sinapsi devices do not check for special elements in commands sent 
to the system. By accessing certain pages with administrative privileges
 that do not require authentication within the device, attackers can 
execute arbitrary, unexpected, or dangerous commands directly onto the 
operating system.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78, CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html; http://www.exploit-db.com/exploits/21273/; http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
CVE: CVE-2012-5864
Published: 2012-11-23
Description: These Sinapsi devices 
do not check if users that visit pages within the device have properly 
authenticated. By directly visiting the pages within the device, 
attackers can gain unauthorized access with administrative privileges.
CVSS Score: 9.4 (HIGH)
CWE: CWE-287, CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2012-09/0045.html; http://www.exploit-db.com/exploits/21273/; http://www.sinapsitech.it/default.asp?active_page_id=78&news_id=88
CVE: CVE-2010-1330
Published: 2012-11-23
Description: The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://rhn.redhat.com/errata/RHSA-2011-1456.html; http://secunia.com/advisories/46891; http://www.jruby.org/2010/04/26/jruby-1-4-1-xss-vulnerability.html
CVE: CVE-2011-1096
Published: 2012-11-23
Description: The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss Enterprise Portal Platform before 5.2.2 and other products, when using block ciphers in cipher-block chaining (CBC) mode, allows remote attackers to obtain plaintext data via a chosen-ciphertext attack on SOAP responses, aka "character encoding pattern attack."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://aktuell.ruhr-uni-bochum.de/pm2011/pm00330.html.de; http://coheigea.blogspot.com/2012/04/note-on-cve-2011-1096.html; http://cxf.apache.org/note-on-cve-2011-1096.html
CVE: CVE-2011-2908
Published: 2012-11-23
Description: Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that perform operations on MBeans and possibly execute arbitrary code via unspecified vectors.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-352
References: http://rhn.redhat.com/errata/RHSA-2012-1152.html; http://rhn.redhat.com/errata/RHSA-2012-1165.html; http://rhn.redhat.com/errata/RHSA-2012-1232.html
CVE: CVE-2011-4085
Published: 2012-11-23
Description: The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method.  NOTE: this vulnerability exists because of a CVE-2010-0738 regression.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://rhn.redhat.com/errata/RHSA-2011-1456.html; http://rhn.redhat.com/errata/RHSA-2011-1798.html; http://rhn.redhat.com/errata/RHSA-2011-1799.html
CVE: CVE-2011-4605
Published: 2012-11-23
Description: The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly restrict write access, which allows remote attackers to add, delete, or modify items in a JNDI tree via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=766469; http://rhn.redhat.com/errata/RHSA-2012-1022.html; http://rhn.redhat.com/errata/RHSA-2012-1023.html
CVE: CVE-2011-5245
Published: 2012-11-23
Description: The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injection attack, a similar vulnerability to CVE-2012-0818.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2012-0441.html; http://rhn.redhat.com/errata/RHSA-2012-0519.html; http://rhn.redhat.com/errata/RHSA-2012-1056.html
CVE: CVE-2012-0818
Published: 2012-11-23
Description: RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2012-0441.html; http://rhn.redhat.com/errata/RHSA-2012-0519.html; http://rhn.redhat.com/errata/RHSA-2012-1056.html
CVE: CVE-2012-1167
Published: 2012-11-23
Description: The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the server is configured to use the JaccAuthorizationRealm and the ignoreBaseDecision property is set to true on the JBossWebRealm, does not properly check the permissions created by the WebPermissionMapping class, which allows remote authenticated users to access arbitrary applications.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2012-1013.html; http://rhn.redhat.com/errata/RHSA-2012-1014.html; http://rhn.redhat.com/errata/RHSA-2012-1026.html
CVE: CVE-2012-2086
Published: 2012-11-23
Description: SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows remote attackers to execute arbitrary SQL commands via the jig parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/48708; http://secunia.com/advisories/48794; http://security.gentoo.org/glsa/glsa-201208-04.xml
CVE: CVE-2012-2377
Published: 2012-11-23
Description: JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.
CVSS Score: 3.3 (LOW)
CWE: CWE-287
References: http://rhn.redhat.com/errata/RHSA-2012-1028.html; http://rhn.redhat.com/errata/RHSA-2012-1125.html; http://rhn.redhat.com/errata/RHSA-2012-1232.html
CVE: CVE-2012-3431
Published: 2012-11-23
Description: The Teiid Java Database Connectivity (JDBC) socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specification, which allows remote attackers to obtain login credentials via a man-in-the-middle (MITM) attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://rhn.redhat.com/errata/RHSA-2012-1301.html; http://www.securityfocus.com/bid/55634; https://bugzilla.redhat.com/show_bug.cgi?id=843669
CVE: CVE-2012-3494
Published: 2012-11-23
Description: The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service (host crash) by writing to the reserved bits of the DR7 debug control register.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html
CVE: CVE-2012-3495
Published: 2012-11-23
Description: The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index without checking that the return value indicates an error, which allows guest OS users to cause a denial of service (invalid memory write and host crash) and possibly gain privileges via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
CVE: CVE-2012-3496
Published: 2012-11-23
Description: XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as MEMF_populate_on_demand.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-16
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html