Novell Home

CVE-2012-0217

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2012-0217 at MITRE

Description

The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1; and possibly other operating systems, when running on an Intel processor, incorrectly uses the sysret path in cases where a certain address is not a canonical address, which allows local users to gain privileges via a crafted application. NOTE: because this issue is due to incorrect use of the Intel specification, it should have been split into separate identifiers; however, there was some value in preserving the original mapping of the multi-codebase coordinated-disclosure effort to a single identifier.

NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

Novell Bugzilla entries: 757537, 764077, 785429, 785434

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SLE 11 SP2 DEBUGINFO
  • libvirt-debuginfo >= 0.9.6-0.15.71
  • libvirt-debugsource >= 0.9.6-0.15.71
  • xen-debuginfo >= 4.1.2_18-0.9.1
  • xen-debugsource >= 4.1.2_18-0.9.1
 Builds
SAT Patch Nr: 6400
SUSE Linux Enterprise Software Development Kit 11 SP2
  • libvirt-devel >= 0.9.6-0.15.71
  • xen-devel >= 4.1.2_18-0.9.1
 Builds
SAT Patch Nr: 6400
SUSE Linux Enterprise Software Development Kit 11 SP2
  • libvirt-devel >= 0.9.6-0.15.71
  • libvirt-devel-32bit >= 0.9.6-0.15.71
  • xen-devel >= 4.1.2_18-0.9.1
 Builds
SAT Patch Nr: 6400
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Server 11 SP2
  • libvirt >= 0.9.6-0.15.71
  • libvirt-client >= 0.9.6-0.15.71
  • libvirt-doc >= 0.9.6-0.15.71
  • libvirt-python >= 0.9.6-0.15.71
  • virt-manager >= 0.9.0-3.17.26
  • virt-utils >= 1.1.7-0.11.15
  • vm-install >= 0.5.9-0.7.13
  • xen-kmp-default >= 4.1.2_18_3.0.31_0.9-0.9.1
  • xen-kmp-pae >= 4.1.2_18_3.0.31_0.9-0.9.1
  • xen-kmp-trace >= 4.1.2_18_3.0.31_0.9-0.9.1
  • xen-libs >= 4.1.2_18-0.9.1
  • xen-tools-domU >= 4.1.2_18-0.9.1
  • yast2-vm >= 2.17.10-0.5.42
 Builds
SAT Patch Nr: 6400
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Server 11 SP2
  • libvirt >= 0.9.6-0.15.71
  • libvirt-client >= 0.9.6-0.15.71
  • libvirt-client-32bit >= 0.9.6-0.15.71
  • libvirt-doc >= 0.9.6-0.15.71
  • libvirt-python >= 0.9.6-0.15.71
  • virt-manager >= 0.9.0-3.17.26
  • virt-utils >= 1.1.7-0.11.15
  • vm-install >= 0.5.9-0.7.13
  • xen >= 4.1.2_18-0.9.1
  • xen-doc-html >= 4.1.2_18-0.9.1
  • xen-doc-pdf >= 4.1.2_18-0.9.1
  • xen-kmp-default >= 4.1.2_18_3.0.31_0.9-0.9.1
  • xen-kmp-trace >= 4.1.2_18_3.0.31_0.9-0.9.1
  • xen-libs >= 4.1.2_18-0.9.1
  • xen-libs-32bit >= 4.1.2_18-0.9.1
  • xen-tools >= 4.1.2_18-0.9.1
  • xen-tools-domU >= 4.1.2_18-0.9.1
  • yast2-vm >= 2.17.10-0.5.42
 Builds
SAT Patch Nr: 6400
SLE 11 SP1 DEBUGINFO
  • xen-debuginfo >= 4.0.3_21548_04-0.9.1
  • xen-debugsource >= 4.0.3_21548_04-0.9.1
 Builds
SAT Patch Nr: 6399
SUSE Linux Enterprise Software Development Kit 11 SP1
  • xen-devel >= 4.0.3_21548_04-0.9.1
 Builds
SAT Patch Nr: 6399
SUSE Linux Enterprise Desktop 11 SP1
  • xen >= 4.0.3_21548_04-0.9.1
  • xen-kmp-default >= 4.0.3_21548_04_2.6.32.59_0.5-0.9.1
  • xen-kmp-pae >= 4.0.3_21548_04_2.6.32.59_0.5-0.9.1
  • xen-libs >= 4.0.3_21548_04-0.9.1
  • xen-tools >= 4.0.3_21548_04-0.9.1
  • xen-tools-domU >= 4.0.3_21548_04-0.9.1
 Builds
SAT Patch Nr: 6399
SUSE Linux Enterprise Desktop 11 SP1
  • xen >= 4.0.3_21548_04-0.9.1
  • xen-kmp-default >= 4.0.3_21548_04_2.6.32.59_0.5-0.9.1
  • xen-libs >= 4.0.3_21548_04-0.9.1
  • xen-tools >= 4.0.3_21548_04-0.9.1
  • xen-tools-domU >= 4.0.3_21548_04-0.9.1
 Builds
SAT Patch Nr: 6399
SUSE Linux Enterprise Server 11 SP1
  • xen >= 4.0.3_21548_04-0.9.1
  • xen-doc-html >= 4.0.3_21548_04-0.9.1
  • xen-doc-pdf >= 4.0.3_21548_04-0.9.1
  • xen-kmp-default >= 4.0.3_21548_04_2.6.32.59_0.5-0.9.1
  • xen-kmp-trace >= 4.0.3_21548_04_2.6.32.59_0.5-0.9.1
  • xen-libs >= 4.0.3_21548_04-0.9.1
  • xen-tools >= 4.0.3_21548_04-0.9.1
  • xen-tools-domU >= 4.0.3_21548_04-0.9.1
 Builds
SAT Patch Nr: 6399
SUSE Linux Enterprise Server 11 SP1 for VMware
  • xen-kmp-trace >= 4.0.3_21548_04_2.6.32.59_0.5-0.9.1
 Builds
SAT Patch Nr: 6399
SUSE Linux Enterprise Server 11 SP1
  • xen >= 4.0.3_21548_04-0.9.1
  • xen-doc-html >= 4.0.3_21548_04-0.9.1
  • xen-doc-pdf >= 4.0.3_21548_04-0.9.1
  • xen-kmp-default >= 4.0.3_21548_04_2.6.32.59_0.5-0.9.1
  • xen-kmp-pae >= 4.0.3_21548_04_2.6.32.59_0.5-0.9.1
  • xen-kmp-trace >= 4.0.3_21548_04_2.6.32.59_0.5-0.9.1
  • xen-libs >= 4.0.3_21548_04-0.9.1
  • xen-tools >= 4.0.3_21548_04-0.9.1
  • xen-tools-domU >= 4.0.3_21548_04-0.9.1
 Builds
SAT Patch Nr: 6399
SUSE Linux Enterprise Server 10 SP3 LTSS for x86
  • xen >= 3.2.3_17040_28-0.6.11.1
  • xen-devel >= 3.2.3_17040_28-0.6.11.1
  • xen-doc-html >= 3.2.3_17040_28-0.6.11.1
  • xen-doc-pdf >= 3.2.3_17040_28-0.6.11.1
  • xen-doc-ps >= 3.2.3_17040_28-0.6.11.1
  • xen-kmp-bigsmp >= 3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1
  • xen-kmp-debug >= 3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1
  • xen-kmp-default >= 3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1
  • xen-kmp-kdump >= 3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1
  • xen-kmp-kdumppae >= 3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1
  • xen-kmp-smp >= 3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1
  • xen-kmp-vmi >= 3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1
  • xen-kmp-vmipae >= 3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1
  • xen-libs >= 3.2.3_17040_28-0.6.11.1
  • xen-tools >= 3.2.3_17040_28-0.6.11.1
  • xen-tools-domU >= 3.2.3_17040_28-0.6.11.1
  • xen-tools-ioemu >= 3.2.3_17040_28-0.6.11.1
 Builds
ZYPP Patch Nr: 8178
SUSE Linux Enterprise Server 10 SP3 LTSS for AMD64 and Intel EM64T
  • xen >= 3.2.3_17040_28-0.6.11.1
  • xen-devel >= 3.2.3_17040_28-0.6.11.1
  • xen-doc-html >= 3.2.3_17040_28-0.6.11.1
  • xen-doc-pdf >= 3.2.3_17040_28-0.6.11.1
  • xen-doc-ps >= 3.2.3_17040_28-0.6.11.1
  • xen-kmp-debug >= 3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1
  • xen-kmp-default >= 3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1
  • xen-kmp-kdump >= 3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1
  • xen-kmp-smp >= 3.2.3_17040_28_2.6.16.60_0.83.131-0.6.11.1
  • xen-libs >= 3.2.3_17040_28-0.6.11.1
  • xen-libs-32bit >= 3.2.3_17040_28-0.6.11.1
  • xen-tools >= 3.2.3_17040_28-0.6.11.1
  • xen-tools-domU >= 3.2.3_17040_28-0.6.11.1
  • xen-tools-ioemu >= 3.2.3_17040_28-0.6.11.1
 Builds
ZYPP Patch Nr: 8178
SUSE Linux Enterprise Server 10 SP2 for x86
  • xen >= 3.2.0_16718_26-0.8.1
  • xen-devel >= 3.2.0_16718_26-0.8.1
  • xen-doc-html >= 3.2.0_16718_26-0.8.1
  • xen-doc-pdf >= 3.2.0_16718_26-0.8.1
  • xen-doc-ps >= 3.2.0_16718_26-0.8.1
  • xen-kmp-bigsmp >= 3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1
  • xen-kmp-debug >= 3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1
  • xen-kmp-default >= 3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1
  • xen-kmp-kdump >= 3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1
  • xen-kmp-smp >= 3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1
  • xen-libs >= 3.2.0_16718_26-0.8.1
  • xen-tools >= 3.2.0_16718_26-0.8.1
  • xen-tools-domU >= 3.2.0_16718_26-0.8.1
  • xen-tools-ioemu >= 3.2.0_16718_26-0.8.1
 Builds
ZYPP Patch Nr: 8177
SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T
  • xen >= 3.2.0_16718_26-0.8.1
  • xen-devel >= 3.2.0_16718_26-0.8.1
  • xen-doc-html >= 3.2.0_16718_26-0.8.1
  • xen-doc-pdf >= 3.2.0_16718_26-0.8.1
  • xen-doc-ps >= 3.2.0_16718_26-0.8.1
  • xen-kmp-debug >= 3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1
  • xen-kmp-default >= 3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1
  • xen-kmp-kdump >= 3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1
  • xen-kmp-smp >= 3.2.0_16718_26_2.6.16.60_0.42.54.11-0.8.1
  • xen-libs >= 3.2.0_16718_26-0.8.1
  • xen-libs-32bit >= 3.2.0_16718_26-0.8.1
  • xen-tools >= 3.2.0_16718_26-0.8.1
  • xen-tools-domU >= 3.2.0_16718_26-0.8.1
  • xen-tools-ioemu >= 3.2.0_16718_26-0.8.1
 Builds
ZYPP Patch Nr: 8177
SUSE Linux Enterprise Desktop 10 SP4 for x86
  • xen >= 3.2.3_17040_38-0.11.1
  • xen-devel >= 3.2.3_17040_38-0.11.1
  • xen-doc-html >= 3.2.3_17040_38-0.11.1
  • xen-doc-pdf >= 3.2.3_17040_38-0.11.1
  • xen-doc-ps >= 3.2.3_17040_38-0.11.1
  • xen-kmp-bigsmp >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-default >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-smp >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-libs >= 3.2.3_17040_38-0.11.1
  • xen-tools >= 3.2.3_17040_38-0.11.1
  • xen-tools-domU >= 3.2.3_17040_38-0.11.1
  • xen-tools-ioemu >= 3.2.3_17040_38-0.11.1
 Builds
ZYPP Patch Nr: 8180
SUSE Linux Enterprise Desktop 10 SP4 for AMD64 and Intel EM64T
  • xen >= 3.2.3_17040_38-0.11.1
  • xen-devel >= 3.2.3_17040_38-0.11.1
  • xen-doc-html >= 3.2.3_17040_38-0.11.1
  • xen-doc-pdf >= 3.2.3_17040_38-0.11.1
  • xen-doc-ps >= 3.2.3_17040_38-0.11.1
  • xen-kmp-default >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-smp >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-libs >= 3.2.3_17040_38-0.11.1
  • xen-libs-32bit >= 3.2.3_17040_38-0.11.1
  • xen-tools >= 3.2.3_17040_38-0.11.1
  • xen-tools-domU >= 3.2.3_17040_38-0.11.1
  • xen-tools-ioemu >= 3.2.3_17040_38-0.11.1
 Builds
ZYPP Patch Nr: 8180
SUSE Linux Enterprise 10 SP4 DEBUGINFO for AMD64 and Intel EM64T
SUSE Linux Enterprise 10 SP4 DEBUGINFO for x86
  • xen-debuginfo >= 3.2.3_17040_38-0.11.1
 Builds
ZYPP Patch Nr: 8180
SLE SDK 10 SP4 for x86
  • xen >= 3.2.3_17040_38-0.11.1
  • xen-devel >= 3.2.3_17040_38-0.11.1
  • xen-kmp-debug >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-kdump >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-libs >= 3.2.3_17040_38-0.11.1
  • xen-tools >= 3.2.3_17040_38-0.11.1
  • xen-tools-ioemu >= 3.2.3_17040_38-0.11.1
 Builds
ZYPP Patch Nr: 8180
SLE SDK 10 SP4 for X86-64
  • xen >= 3.2.3_17040_38-0.11.1
  • xen-devel >= 3.2.3_17040_38-0.11.1
  • xen-kmp-debug >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-kdump >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-libs >= 3.2.3_17040_38-0.11.1
  • xen-libs-32bit >= 3.2.3_17040_38-0.11.1
  • xen-tools >= 3.2.3_17040_38-0.11.1
  • xen-tools-ioemu >= 3.2.3_17040_38-0.11.1
 Builds
ZYPP Patch Nr: 8180
SUSE Linux Enterprise Server 10 SP4 for x86
  • xen >= 3.2.3_17040_38-0.11.1
  • xen-devel >= 3.2.3_17040_38-0.11.1
  • xen-doc-html >= 3.2.3_17040_38-0.11.1
  • xen-doc-pdf >= 3.2.3_17040_38-0.11.1
  • xen-doc-ps >= 3.2.3_17040_38-0.11.1
  • xen-kmp-bigsmp >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-debug >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-default >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-kdump >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-kdumppae >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-smp >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-vmi >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-vmipae >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-libs >= 3.2.3_17040_38-0.11.1
  • xen-tools >= 3.2.3_17040_38-0.11.1
  • xen-tools-domU >= 3.2.3_17040_38-0.11.1
  • xen-tools-ioemu >= 3.2.3_17040_38-0.11.1
 Builds
ZYPP Patch Nr: 8180
SUSE Linux Enterprise Server 10 SP4 for AMD64 and Intel EM64T
  • xen >= 3.2.3_17040_38-0.11.1
  • xen-devel >= 3.2.3_17040_38-0.11.1
  • xen-doc-html >= 3.2.3_17040_38-0.11.1
  • xen-doc-pdf >= 3.2.3_17040_38-0.11.1
  • xen-doc-ps >= 3.2.3_17040_38-0.11.1
  • xen-kmp-debug >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-default >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-kdump >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-kmp-smp >= 3.2.3_17040_38_2.6.16.60_0.97.1-0.11.1
  • xen-libs >= 3.2.3_17040_38-0.11.1
  • xen-libs-32bit >= 3.2.3_17040_38-0.11.1
  • xen-tools >= 3.2.3_17040_38-0.11.1
  • xen-tools-domU >= 3.2.3_17040_38-0.11.1
  • xen-tools-ioemu >= 3.2.3_17040_38-0.11.1
 Builds
ZYPP Patch Nr: 8180

© 2013 Novell