CVE-2012-2625 json
The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to c…
published 2012-10-31 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-2611
- cvss
- 2.7
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.9%
- EPSS 0.9% chance of exploitation in 30 days, percentile 60%
- public exploits
- 0
- none known
Summary
The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1) bzip2 or (2) lzma compressed kernel image.
Patch / fix
- xen xen-unstable 25589\:60f09d1ab1fe
- xen Debian 14, Debian 13, Debian 12 4.1.3-4
debian advisories DEBIAN-CVE-2012-2625
- xen RHEL 5 VIRTUALIZATION, RHEL 5 3.0.3-135.el5_8.4
- xen-libs RHEL 5 3.0.3-135.el5_8.4
red hat advisories RHSA-2012:1130
- xen openSUSE Tumbleweed 4.7.0_12-1.3
opensuse advisories openSUSE-SU-2024:10196-1
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2012-2625 updated cvss 2.7
xen: pv bootloader doesn't check the size of the bzip2 or lzma compressed kernel
-
Red Hat Enterprise Linux (v. 5 server) xen 3.0.3-135.el5_8.4, xen-libs 3.0.3-135.el5_8.4 Red Hat Enterprise Linux Desktop (v. 5 client) xen 3.0.3-135.el5_8.4, xen-libs 3.0.3-135.el5_8.4 Red Hat RHEL Desktop Multi OS (v. 5 client) xen 3.0.3-135.el5_8.4, xen-libs 3.0.3-135.el5_8.4 Red Hat RHEL Virtualization (v. 5 server) xen 3.0.3-135.el5_8.4, xen-libs 3.0.3-135.el5_8.4fixed: vendor fix RHSA-2012:1130
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.92% chance of exploitation in the next 30 days, higher than 60% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 2.7 | AV:A/AC:L/Au:S/C:N/I:N/A:P |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
rhn.redhat.com
/errata/RHSA-2012-1130.html
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2012-09/msg00005.html
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2012-08/msg00025.html
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2012-11/msg00017.html
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2012-08/msg00024.html
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2012-09/msg00018.html
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2012-11/msg00018.html
vendor-advisory, third-party-advisory
-
lists.opensuse.org
/opensuse-security-announce/2012-09/msg00017.html
vendor-advisory, third-party-advisory
-
xenbits.xensource.com
/hg/xen-unstable.hg/rev/60f09d1ab1fe
vendor-advisory
-
openwall.com
/lists/oss-security/2012/10/26/3
mailing-list, third-party-advisory
-
secunia.com
/advisories/51413
third-party-advisory
-
bugzilla.xensource.com
/bugzilla/show_bug.cgi?id=1817
broken-link
-
securityfocus.com
/bid/53650
vdb-entry, third-party-advisory
-
securitytracker.com
/id?1027090
vdb-entry, third-party-advisory
-
secunia.com
/advisories/49184
third-party-advisory
Sources
- CVE List CVE-2012-2625
- NVD CVE-2012-2625
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.