CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 4.4
CWE Name:  Permissions Privileges and Access Controls
Summary: the do_tmem_control function in the transcendent memory (tmem) in xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest os users to access control stack operations via unspecified vectors.  note: this issue was originally published as part of cve-2012-3497, which was too general; cve-2012-3497 has been split into this id and others.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2012-11-23
Last Modified Date: 2017-08-29