Xen 3.4 through 4.2, and possibly earlier versions, does not...

Vulnerability Description

Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability."

References

• http://rhn.redhat.com/errata/RHSA-2012-1540.html
• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html
• http://secunia.com/advisories/55082
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80024
• http://www.openwall.com/lists/oss-security/2012/11/13/6
• http://secunia.com/advisories/51413
• http://secunia.com/advisories/51200
• http://security.gentoo.org/glsa/glsa-201309-24.xml
• http://www.debian.org/security/2012/dsa-2582
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html
• http://lists.xen.org/archives/html/xen-announce/2012-11/msg00005.html
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
• http://secunia.com/advisories/51468
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
• http://secunia.com/advisories/51352
• http://secunia.com/advisories/51324
• https://security.gentoo.org/glsa/201604-03
• http://www.securityfocus.com/bid/56498
• http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html
• http://osvdb.org/87307
• http://www.securitytracker.com/id?1027761