NVD

Id
42354  
Name
CVE-2012-0217  
Description
The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1; and possibly other operating systems, when running on an Intel processor, incorrectly uses the sysret path in cases where a certain address is not a canonical address, which allows local users to gain privileges via a crafted application. NOTE: because this issue is due to incorrect use of the Intel specification, it should have been split into separate identifiers; however, there was some value in preserving the original mapping of the multi-codebase coordinated-disclosure effort to a single identifier.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-06-12  
Modified Date
2013-10-10  
Seq
2012-0217  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
213669 42354 CVE-2012-0217 http://blog.illumos.org/2012/06/14/illumos-vulnerability-patched/  View
213670 42354 CVE-2012-0217 http://blog.xen.org/index.php/2012/06/13/the-intel-sysret-privilege-escalation/  View
213671 42354 CVE-2012-0217 NetBSD-SA2012-003  View
213672 42354 CVE-2012-0217 [xen-announce] 20120612 Xen Security Advisory 7 (CVE-2012-0217) - PV privilege escalation  View
213673 42354 CVE-2012-0217 [xen-devel] 20120619 Security vulnerability process, and CVE-2012-0217  View
213674 42354 CVE-2012-0217 oval:org.mitre.oval:def:15596  View
213675 42354 CVE-2012-0217 FreeBSD-SA-12:04  View
213676 42354 CVE-2012-0217 GLSA-201309-24  View
213677 42354 CVE-2012-0217 http://smartos.org/2012/06/15/smartos-news-3/  View
213678 42354 CVE-2012-0217 http://support.citrix.com/article/CTX133161  View
213679 42354 CVE-2012-0217 MS12-042  View
213680 42354 CVE-2012-0217 http://wiki.smartos.org/display/DOC/SmartOS+Change+Log#SmartOSChangeLog-June14%2C2012  View
213681 42354 CVE-2012-0217 DSA-2501  View
213682 42354 CVE-2012-0217 DSA-2508  View
213683 42354 CVE-2012-0217 VU#649219  View
213684 42354 CVE-2012-0217 MDVSA-2013:150  View
213685 42354 CVE-2012-0217 http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html  View
213686 42354 CVE-2012-0217 TA12-164A  View
213687 42354 CVE-2012-0217 https://bugzilla.redhat.com/show_bug.cgi?id=813428  View
213688 42354 CVE-2012-0217 https://www.illumos.org/issues/2873  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26986 JVNDB-2012-002693 Intel CPU で動作する 64bit OS や仮想化環境に権限昇格の脆弱性 Intel CPU で動作する複数の 64bit OS や仮想化環境には、権限昇格の脆弱性が存在します。 CVE-2012-0217 53455 CVE-2012-0217 42354 7.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002693.html 2012-06-13 2012-12-07 View