{"metadata": {"vulnerability": "CVE-2012-0217", "count": 74, "kinds": {"milestone": 9, "sighting": 8, "kev": 0, "other": 57}}, "data": [{"timestamp": "2011-11-09T00:00:00Z", "date_only": false, "value": "2011-11-09T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2011-11-09T00:00:00Z", "date_only": false, "value": "2011-11-09T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2012_0720", "record": "RHSA-2012_0720", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2011-12-14T00:00:00Z", "date_only": false, "value": "2011-12-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2012-0217", "field": "cveMetadata.dateReserved"}, {"timestamp": "2012-04-17T00:00:00Z", "date_only": false, "value": "2012-04-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2012-04-17T00:00:00Z", "date_only": false, "value": "2012-04-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2012:0721", "record": "RHSA-2012:0721", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2012-04-17T00:00:00Z", "date_only": false, "value": "2012-04-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2012_0720", "record": "RHSA-2012_0720", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2012-04-17T00:00:00Z", "date_only": false, "value": "2012-04-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2012_0721", "record": "RHSA-2012_0721", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2012-04-17T00:00:00Z", "date_only": false, "value": "2012-04-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2012-04-17T00:00:00Z", "date_only": false, "value": "2012-04-17T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2012_0720", "record": "RHSA-2012_0720", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2012-05-24T00:00:00Z", "date_only": false, "value": "2012-05-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2012:0721", "record": "RHSA-2012:0721", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2012-05-24T00:00:00Z", "date_only": false, "value": "2012-05-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2012_0721", "record": "RHSA-2012_0721", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2012-06-12T00:00:00Z", "date_only": false, "value": "2012-06-12T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / debian", "record": "CVE-2012-0217", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T00:00:00Z", "date_only": false, "value": "2012-06-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T00:00:00Z", "date_only": false, "value": "2012-06-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2012:0721", "record": "RHSA-2012:0721", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T00:00:00Z", "date_only": false, "value": "2012-06-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2012_0720", "record": "RHSA-2012_0720", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T00:00:00Z", "date_only": false, "value": "2012-06-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2012_0721", "record": "RHSA-2012_0721", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T14:02:00Z", "date_only": false, "value": "2012-06-12T14:02:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2012-06-12T14:02:00Z", "date_only": false, "value": "2012-06-12T14:02:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2012_0720", "record": "RHSA-2012_0720", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2012-06-12T14:02:00Z", "date_only": false, "value": "2012-06-12T14:02:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T14:02:00Z", "date_only": false, "value": "2012-06-12T14:02:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2012_0720", "record": "RHSA-2012_0720", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T14:02:00Z", "date_only": false, "value": "2012-06-12T14:02:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T14:02:00Z", "date_only": false, "value": "2012-06-12T14:02:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2012_0720", "record": "RHSA-2012_0720", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T14:07:00Z", "date_only": false, "value": "2012-06-12T14:07:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2012:0721", "record": "RHSA-2012:0721", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2012-06-12T14:07:00Z", "date_only": false, "value": "2012-06-12T14:07:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2012_0721", "record": "RHSA-2012_0721", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2012-06-12T14:07:00Z", "date_only": false, "value": "2012-06-12T14:07:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2012:0721", "record": "RHSA-2012:0721", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T14:07:00Z", "date_only": false, "value": "2012-06-12T14:07:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2012_0721", "record": "RHSA-2012_0721", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T14:07:00Z", "date_only": false, "value": "2012-06-12T14:07:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2012:0721", "record": "RHSA-2012:0721", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T14:07:00Z", "date_only": false, "value": "2012-06-12T14:07:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2012_0721", "record": "RHSA-2012_0721", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T14:12:50Z", "date_only": false, "value": "2012-06-12T14:12:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2012:0721", "record": "RHSA-2012:0721", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2012-06-12T14:12:50Z", "date_only": false, "value": "2012-06-12T14:12:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2012_0721", "record": "RHSA-2012_0721", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2012-06-12T22:00:00Z", "date_only": false, "value": "2012-06-12T22:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2012-0217", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-12T22:55:00Z", "date_only": false, "value": "2012-06-12T22:55:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q644-363Q-JFMM", "record": "GHSA-Q644-363Q-JFMM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2012-06-12T22:55:00Z", "date_only": false, "value": "2012-06-12T22:55Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2012-0217", "record": "GSD-2012-0217", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2012-06-12T22:55:01.343Z", "date_only": false, "value": "2012-06-12T22:55:01.343", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2012-0217", "record": "FKIE_CVE-2012-0217", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2012-06-13T00:00:00Z", "date_only": false, "value": "2012-06-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2012-AVI-326", "record": "CERTA-2012-AVI-326", "field": "revisions.0.revision_date"}, {"timestamp": "2012-06-13T00:00:00Z", "date_only": false, "value": "2012-06-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2012-AVI-328", "record": "CERTA-2012-AVI-328", "field": "revisions.0.revision_date"}, {"timestamp": "2012-06-15T00:00:00Z", "date_only": false, "value": "2012-06-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2012-AVI-334", "record": "CERTA-2012-AVI-334", "field": "revisions.0.revision_date"}, {"timestamp": "2012-06-20T07:47:10Z", "date_only": false, "value": "2012-06-20T07:47:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2012-06-20T07:47:10Z", "date_only": false, "value": "2012-06-20T07:47:10+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2012_0720", "record": "RHSA-2012_0720", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2012-08-27T00:00:00Z", "date_only": false, "value": "2012-08-27T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/20861", "record": "CVE-2012-0217", "field": "creation_timestamp", "uuid": "c0d8bad7-e260-4d51-bd37-d26c89484663", "url": "https://www.exploit-db.com/exploits/20861"}, {"timestamp": "2012-10-17T00:00:00Z", "date_only": false, "value": "2012-10-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2012-AVI-586", "record": "CERTA-2012-AVI-586", "field": "revisions.0.revision_date"}, {"timestamp": "2013-10-04T00:00:00Z", "date_only": false, "value": "2013-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/28718", "record": "CVE-2012-0217", "field": "creation_timestamp", "uuid": "7c3fb4ce-8580-4a8c-89f3-d1de84bacf22", "url": "https://www.exploit-db.com/exploits/28718"}, {"timestamp": "2019-03-07T00:00:00Z", "date_only": false, "value": "2019-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/46508", "record": "CVE-2012-0217", "field": "creation_timestamp", "uuid": "c81fcfee-9830-48d7-a5e3-868e2deb09f0", "url": "https://www.exploit-db.com/exploits/46508", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-03-07T02:02:18Z", "date_only": false, "value": "2019-03-07T02:02:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/local/intel_sysret_priv_esc.rb", "record": "CVE-2012-0217", "field": "creation_timestamp", "uuid": "96b26781-6f7a-4f43-91fa-8295be6f5b99", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/local/intel_sysret_priv_esc.rb"}, {"timestamp": "2019-03-07T21:37:26Z", "date_only": false, "value": "2019-03-07T21:37:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/VulnerabilityNews/5241", "record": "CVE-2012-0217", "field": "creation_timestamp", "uuid": "c8bc898a-d176-445f-b975-66b6c89ee85c", "content": "#0daytoday #FreeBSD - Intel SYSRET Privilege Escalation Exploit CVE-2012-0217 [remote #exploits #0day #Exploit]\nRead More", "url": "https://t.me/VulnerabilityNews/5241", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-03-08T10:57:01Z", "date_only": false, "value": "2019-03-08T10:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / debian", "record": "CVE-2012-0217", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-09-28T12:58:00Z", "date_only": false, "value": "2020-09-28T12:58Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2012-0217", "record": "GSD-2012-0217", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-04T00:28:51Z", "date_only": false, "value": "2022-05-04T00:28:51Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q644-363Q-JFMM", "record": "GHSA-Q644-363Q-JFMM", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-12-13T01:20:13.914Z", "date_only": false, "value": "2023-12-13T01:20:13.914797Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2012-0217", "record": "GSD-2012-0217", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10196-1", "record": "OPENSUSE-SU-2024:10196-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10196-1", "record": "OPENSUSE-SU-2024:10196-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10196-1", "record": "OPENSUSE-SU-2024:10196-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10196-1", "record": "OPENSUSE-SU-2024:10196-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-06T18:16:19.831Z", "date_only": false, "value": "2024-08-06T18:16:19.831Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2012-0217", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-06T18:16:19.831Z", "date_only": false, "value": "2024-08-06T18:16:19.831Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2012-0217", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-22T05:21:14Z", "date_only": false, "value": "2024-11-22T05:21:14+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2012_0720", "record": "RHSA-2012_0720", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-22T05:21:14Z", "date_only": false, "value": "2024-11-22T05:21:14+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2012_0720", "record": "RHSA-2012_0720", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-22T05:21:14Z", "date_only": false, "value": "2024-11-22T05:21:14+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2012_0720", "record": "RHSA-2012_0720", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-22T05:21:19Z", "date_only": false, "value": "2024-11-22T05:21:19+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2012_0721", "record": "RHSA-2012_0721", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-22T05:21:19Z", "date_only": false, "value": "2024-11-22T05:21:19+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2012_0721", "record": "RHSA-2012_0721", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-22T05:21:19Z", "date_only": false, "value": "2024-11-22T05:21:19+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2012_0721", "record": "RHSA-2012_0721", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-02-06T03:13:40Z", "date_only": false, "value": "2025-02-06T03:13:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2012-0217", "field": "creation_timestamp", "uuid": "8bb92d3d-ede2-4391-b227-33b4ae497c3c"}, {"timestamp": "2025-02-23T04:09:01Z", "date_only": false, "value": "2025-02-23T04:09:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2012-0217", "field": "creation_timestamp", "uuid": "6319706e-fa1e-420c-bd0f-ba9c0c651aa4"}, {"timestamp": "2025-04-11T03:58:20Z", "date_only": false, "value": "2025-04-11T03:58:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q644-363Q-JFMM", "record": "GHSA-Q644-363Q-JFMM", "field": "modified"}, {"timestamp": "2026-06-08T13:15:12.580Z", "date_only": false, "value": "2026-06-08T13:15:12.580168Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/andersonc0d3/statuses/116714668750112519", "record": "cve-2012-0217", "field": "creation_timestamp", "uuid": "701851ee-0bb3-4c70-baa9-62d14daaea7d", "content": "A few links about CVE-2012-0217\u2014the SYSRET vulnerability. A difference in behavior on Intel CPUs compared to other x86 CPUs that allowed Arbitrary Code Execution on kernels and hypervisors.\nThe first link below is from a presentation at Black Hat by the researcher who discovered it.\nThe second link, if I am not mistaken, is the first public exploit for that vulnerability, achieving Privilege Escalation on FreeBSD.\nThen I found two blog posts from the now-defunct company VUPEN, detailing how they exploited it on Windows and Xen.\nThe last two links are the official blog post from the Xen Project and a technical write-up from NCC Group about exploiting Xen based on the VUPEN article.\nA Stitch in Time Saves Nine: A Case of Multiple Operating System Vulnerability https://media.blackhat.com/bh-us-12/Briefings/Wojtczuk/BH_US_12_Wojtczuk_A_Stitch_In_Time_Slides.pdf\nCVE-2012-0217: Intel's sysret Kernel Privilege Escalation (on FreeBSD) https://fail0verflow.com/blog/2012/cve-2012-0217-intel-sysret-freebsd/\nAdvanced Exploitation of Windows Kernel Intel 64-Bit Mode Sysret Vulnerability (MS12-042) https://web.archive.org/web/20120824020724/http://www.vupen.com/blog/20120806.Advanced_Exploitation_of_Windows_Kernel_x64_Sysret_EoP_MS12-042_CVE-2012-0217.php\nAdvanced Exploitation of Xen Hypervisor Sysret VM Escape Vulnerability https://web.archive.org/web/20120908033139/http://www.vupen.com/blog/20120904.Advanced_Exploitation_of_Xen_Sysret_VM_Escape_CVE-2012-0217.php\nThe Intel SYSRET privilege escalation https://xenproject.org/blog/the-intel-sysret-privilege-escalation/\nAdventures in Xen Exploitation https://www.nccgroup.com/research/adventures-in-xen-exploitation/\nThere's also this academic work, but I couldn't find the full-text PDF. \nIntel SYSRET Privilege Escalation Vulnerability Analysishttps://link.springer.com/chapter/10.1007/978-3-642-35211-9_5", "url": "https://infosec.exchange/users/andersonc0d3/statuses/116714668750112519"}, {"timestamp": "2026-06-16T23:36:54.693Z", "date_only": false, "value": "2026-06-16T23:36:54.693", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2012-0217", "record": "FKIE_CVE-2012-0217", "field": "lastModified"}, {"timestamp": "2026-06-25T10:38:23Z", "date_only": false, "value": "2026-06-25T10:38:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2012:0721", "record": "RHSA-2012:0721", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-25T10:38:23Z", "date_only": false, "value": "2026-06-25T10:38:23+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2012:0721", "record": "RHSA-2012:0721", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-25T10:38:23Z", "date_only": false, "value": "2026-06-25T10:38:23+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2012:0721", "record": "RHSA-2012:0721", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-27T14:21:03Z", "date_only": false, "value": "2026-06-27T14:21:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-27T14:21:03Z", "date_only": false, "value": "2026-06-27T14:21:03+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-27T14:21:03Z", "date_only": false, "value": "2026-06-27T14:21:03+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:54:03Z", "date_only": false, "value": "2026-09-20T19:54:03Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10196-1", "record": "OPENSUSE-SU-2024:10196-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:54:03Z", "date_only": false, "value": "2026-09-20T19:54:03Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:10196-1", "record": "OPENSUSE-SU-2024:10196-1", "field": "document.tracking.current_release_date"}], "metrics": {"as_of": "2026-11-02T18:09:13.422Z", "anchors": {"origin": {"timestamp": "2012-04-17T00:00:00Z", "date_only": false, "value": "2012-04-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "discovery": {"timestamp": "2012-04-17T00:00:00Z", "date_only": false, "value": "2012-04-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2012-06-12T00:00:00Z", "date_only": false, "value": "2012-06-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2019-03-07T00:00:00Z", "date_only": false, "value": "2019-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/46508", "record": "CVE-2012-0217", "field": "creation_timestamp", "uuid": "c81fcfee-9830-48d7-a5e3-868e2deb09f0", "url": "https://www.exploit-db.com/exploits/46508", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2012-06-12T14:02:00Z", "date_only": false, "value": "2012-06-12T14:02:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 212457600.0, "hours": 59016.0, "days": 2459.0, "min_seconds": 212371200.0, "max_seconds": 212544000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2012-06-12T00:00:00Z", "date_only": false, "value": "2012-06-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-03-07T00:00:00Z", "date_only": false, "value": "2019-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/46508", "record": "CVE-2012-0217", "field": "creation_timestamp", "uuid": "c81fcfee-9830-48d7-a5e3-868e2deb09f0", "url": "https://www.exploit-db.com/exploits/46508", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 4888920.0, "hours": 1358.0333333333333, "days": 56.584722222222226, "min_seconds": 4802520.0, "max_seconds": 4888920.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2012-04-17T00:00:00Z", "date_only": false, "value": "2012-04-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2012-06-12T14:02:00Z", "date_only": false, "value": "2012-06-12T14:02:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "disclosure_to_patch": {"available": true, "seconds": 50520.0, "hours": 14.033333333333333, "days": 0.5847222222222223, "min_seconds": -35880.0, "max_seconds": 50520.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2012-06-12T00:00:00Z", "date_only": false, "value": "2012-06-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2012-06-12T14:02:00Z", "date_only": false, "value": "2012-06-12T14:02:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 4888920.0, "hours": 1358.0333333333333, "days": 56.584722222222226, "min_seconds": 4802520.0, "max_seconds": 4888920.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2012-04-17T00:00:00Z", "date_only": false, "value": "2012-04-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.discovery_date", "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2012-06-12T14:02:00Z", "date_only": false, "value": "2012-06-12T14:02:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": -212407080.0, "hours": -59001.96666666667, "days": -2458.4152777777776, "min_seconds": -212493480.0, "max_seconds": -212407080.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2019-03-07T00:00:00Z", "date_only": false, "value": "2019-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/46508", "record": "CVE-2012-0217", "field": "creation_timestamp", "uuid": "c81fcfee-9830-48d7-a5e3-868e2deb09f0", "url": "https://www.exploit-db.com/exploits/46508", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2012-06-12T14:02:00Z", "date_only": false, "value": "2012-06-12T14:02:00+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2012:0720", "record": "RHSA-2012:0720", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}}}