UnratedFix available
xen — security advisory
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
- Products
- xen
- Affected versions
- Not specified
- Fixed versions
- 4.1.3-4
- CVEs
- CVE-2012-4544
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 23:04 UTC · Revision 1
Source evidence
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
osv:DEBIAN-CVE-2012-4544
xen
Fixed versions: 4.1.3-4
xen
Fixed versions: 4.1.3-4
xen
Fixed versions: 4.1.3-4
Complete source record
{
"id": "f10c2d3519f59ecf8fc2530e77524453c1b8f83a327acab592cf5d563351a1ac",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2012-4544",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2012-4544",
"summary": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.",
"evidence": "osv:DEBIAN-CVE-2012-4544",
"products": [
{
"name": {
"value": "xen",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.1.3-4",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xen",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.1.3-4",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "xen",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.1.3-4",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2012-4544",
"aliases": [
"DEBIAN-CVE-2012-4544"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.1.3-4"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:deb/debian/xen?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2012-4544.json"
},
"ecosystem_specific": {
"urgency": "low"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.1.3-4"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:deb/debian/xen?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2012-4544.json"
},
"ecosystem_specific": {
"urgency": "low"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.1.3-4"
}
]
}
],
"package": {
"name": "xen",
"purl": "pkg:deb/debian/xen?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2012-4544.json"
},
"ecosystem_specific": {
"urgency": "low"
}
}
],
"modified": "2026-10-23T17:47:33.922696951Z",
"provider": "osv",
"upstream": [
"CVE-2012-4544"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2012-4544"
]
},
"related_cves": [
{
"value": "CVE-2012-4544",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 417650,
"published_at": "2012-10-31T16:55:05.827+00:00"
}