The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1; and possibly other operating systems, when running on an Intel processor, incorrectly uses the sysret path in cases where a certain address is not a canonical address, which allows local users to gain privileges via a crafted application. NOTE: because this issue is due to incorrect use of the Intel specification, it should have been split into separate identifiers; however, there was some value in preserving the original mapping of the multi-codebase coordinated-disclosure effort to a single identifier.
CVE-2012-0217 is a security vulnerability that . Impacting 11 products from freebsd, from illumos, from joyent and 8 others, organizations running these solutions should prioritize assessment and patching.
Documented in 2012, this vulnerability occurred amid the cloud computing expansion era, where traditional network perimeter security models were being reevaluated. Organizations were transitioning from isolated infrastructure to interconnected systems, creating new attack surfaces that vulnerabilities like this could exploit.
2012-06-12T22:55:01.343
2025-04-11T00:51:21.963
Deferred
CVSSv2: 7.2 (HIGH)
AV:L/AC:L/Au:N/C:C/I:C/A:C
3.9
10.0
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | freebsd | freebsd | ≤ 9.0 | Yes |
| Operating System | illumos | illumos | ≤ r13723 | Yes |
| Operating System | joyent | smartos | ≤ 20120614 | Yes |
| Operating System | xen | xen | ≤ 4.1.2 | Yes |
| Operating System | xen | xen | 4.0.0 | Yes |
| Operating System | xen | xen | 4.0.1 | Yes |
| Operating System | xen | xen | 4.0.2 | Yes |
| Operating System | xen | xen | 4.0.3 | Yes |
| Operating System | xen | xen | 4.0.4 | Yes |
| Operating System | xen | xen | 4.1.0 | Yes |
| Operating System | xen | xen | 4.1.1 | Yes |
| Operating System | microsoft | windows_7 | * | Yes |
| Operating System | microsoft | windows_7 | * | Yes |
| Operating System | microsoft | windows_server_2003 | * | Yes |
| Operating System | microsoft | windows_server_2008 | r2 | Yes |
| Operating System | microsoft | windows_xp | * | Yes |
| Application | citrix | xenserver | ≤ 6.0.2 | Yes |
| Application | citrix | xenserver | 6.0 | Yes |
| Operating System | netbsd | netbsd | ≤ 6.0 | Yes |
| Operating System | sun | sunos | ≤ 5.11 | Yes |
SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For freebsd's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.