Back to bug 813428
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Petr Matousek | 2012-04-17 18:30:11 UTC | CC | agordeev, anton, dhoward, jarod, lwang, plougher, sforsber, xen-maint | |
| Petr Matousek | 2012-04-17 18:38:32 UTC | Whiteboard | public=20120501,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected | impact=important,public=20120501,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected |
| Petr Matousek | 2012-04-17 18:39:22 UTC | Depends On | 813430 | |
| Petr Matousek | 2012-04-17 18:39:35 UTC | Depends On | 813431 | |
| Petr Matousek | 2012-04-17 18:43:00 UTC | CC | dlaor, drjones, imammedo, lersek, pbonzini | |
| Petr Matousek | 2012-04-17 18:50:52 UTC | Blocks | 813442 | |
| Petr Matousek | 2012-04-18 17:33:28 UTC | Flags | needinfo?(pbonzini) | |
| Paolo Bonzini | 2012-04-18 18:33:43 UTC | Flags | needinfo?(pbonzini) | |
| Paolo Bonzini | 2012-04-18 18:46:36 UTC | Depends On | 813908 | |
| Andrew Jones | 2012-04-19 06:41:07 UTC | CC | mrezanin | |
| Lei Wang | 2012-04-19 15:11:13 UTC | CC | leiwang, qguan, qwan | |
| Andrew Jones | 2012-04-20 18:12:54 UTC | Status | NEW | POST |
| Petr Matousek | 2012-04-20 19:05:02 UTC | Status | POST | NEW |
| Petr Matousek | 2012-04-23 12:39:57 UTC | Depends On | 813908 | |
| Petr Matousek | 2012-04-23 17:16:44 UTC | Blocks | 815484 | |
| Ramon de C Valle | 2012-04-26 15:55:17 UTC | CC | rcvalle | |
| Whiteboard | impact=important,public=20120501,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected | impact=important,public=20120501,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected,cwe=CWE-119 | ||
| Petr Matousek | 2012-04-30 09:07:46 UTC | Whiteboard | impact=important,public=20120501,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected,cwe=CWE-119 | impact=important,public=20120501,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected rhel-5.6.z/kernel-xen=affected,cwe=CWE-119 |
| Petr Matousek | 2012-04-30 09:10:04 UTC | Depends On | 817489 | |
| Mark J. Cox | 2012-04-30 18:06:53 UTC | CC | mjc | |
| Mark J. Cox | 2012-05-01 06:41:43 UTC | Whiteboard | impact=important,public=20120501,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected rhel-5.6.z/kernel-xen=affected,cwe=CWE-119 | impact=important,public=20120531,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected rhel-5.6.z/kernel-xen=affected,cwe=CWE-119 |
| Mark J. Cox | 2012-05-02 08:01:22 UTC | Whiteboard | impact=important,public=20120531,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected rhel-5.6.z/kernel-xen=affected,cwe=CWE-119 | impact=important,public=20120601,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected rhel-5.6.z/kernel-xen=affected,cwe=CWE-119 |
| Mark J. Cox | 2012-05-03 09:55:02 UTC | Whiteboard | impact=important,public=20120601,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected rhel-5.6.z/kernel-xen=affected,cwe=CWE-119 | impact=important,public=20120612,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected rhel-5.6.z/kernel-xen=affected,cwe=CWE-119 |
| Petr Matousek | 2012-05-03 17:57:47 UTC | CC | ddugger | |
| Petr Matousek | 2012-05-09 15:09:13 UTC | CC | knoel | |
| Mohua Li | 2012-06-05 09:20:53 UTC | CC | moli | |
| Petr Matousek | 2012-06-11 11:24:24 UTC | Blocks | 823418 | |
| Jan Lieskovsky | 2012-06-12 12:07:20 UTC | Group | security, qe_staff | |
| CC | jlieskov | |||
| Summary | EMBARGOED CVE-2012-0217 kernel: x86-64: avoid sysret to non-canonical address | CVE-2012-0217 kernel: x86-64: avoid sysret to non-canonical address | ||
| Kirill Korotaev | 2012-06-13 08:08:52 UTC | CC | dev | |
| R P Herrold | 2012-06-14 15:15:31 UTC | CC | herrold | |
| Mark J. Cox | 2012-06-15 14:25:40 UTC | Whiteboard | impact=important,public=20120612,reported=20120417,source=rt,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected rhel-5.6.z/kernel-xen=affected,cwe=CWE-119 | impact=important,public=20120612,reported=20120417,source=xen,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected rhel-5.6.z/kernel-xen=affected,cwe=CWE-119 |
| Ramon de C Valle | 2012-07-18 00:21:51 UTC | Whiteboard | impact=important,public=20120612,reported=20120417,source=xen,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected rhel-5.6.z/kernel-xen=affected,cwe=CWE-119 | impact=important,public=20120612,reported=20120417,source=xen,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected rhel-5.6.z/kernel-xen=affected |
| Simon Green | 2013-01-10 00:52:42 UTC | CC | dlaor | tburke |
| Simon Green | 2013-04-30 23:17:37 UTC | CC | moli | |
| Simon Green | 2013-07-29 01:36:39 UTC | CC | qguan | |
| John Skeoch | 2013-10-14 23:35:15 UTC | CC | rcvalle | bressers |
| John Skeoch | 2014-06-18 08:04:42 UTC | CC | anton | nobody |
| John Skeoch | 2014-07-25 03:23:43 UTC | CC | ddugger | |
| Don Bayly | 2014-08-06 15:30:07 UTC | CC | ddugger | |
| Petr Matousek | 2014-08-06 15:37:24 UTC | Status | NEW | CLOSED |
| Resolution | --- | ERRATA | ||
| Last Closed | 2014-08-06 11:37:24 UTC | |||
| Martin Prpič | 2014-09-02 13:40:42 UTC | Doc Text | It was found that the Xen hypervisor implementation as shipped with Red Hat Enterprise Linux 5 did not properly restrict the syscall return addresses in the sysret return path to canonical addresses. An unprivileged user in a 64-bit para-virtualized guest, that is running on a 64-bit host that has an Intel CPU, could use this flaw to crash the host or, potentially, escalate their privileges, allowing them to execute arbitrary code at the hypervisor level. | |
| Jarod Wilson | 2015-02-16 15:44:32 UTC | CC | jarod | |
| Ján Rusnačko | 2015-08-19 09:15:35 UTC | Severity | medium | high |
| Ján Rusnačko | 2015-08-19 09:15:39 UTC | Priority | medium | high |
| Product Security DevOps Team | 2019-09-29 12:52:21 UTC | Whiteboard | impact=important,public=20120612,reported=20120417,source=xen,cvss2=7.9/AV:A/AC:M/Au:N/C:C/I:C/A:C,rhel-5/kernel=notaffected,rhel-6/kernel=notaffected,mrg-2/realtime-kernel=notaffected,fedora-all/kernel=notaffected,rhel-5/kernel-xen=affected,rhel-5.6.z/kernel-xen=affected |
Back to bug 813428