{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/3908?format=json","vulnerability_id":"VCID-vmj3-kufn-skcw","summary":"several hypercalls do not validate input GFNs","aliases":[{"alias":"CVE-2012-5525"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/943271?format=json","purl":"pkg:deb/debian/xen@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/xen@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/943265?format=json","purl":"pkg:deb/debian/xen@4.14.6-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1tb8-t91c-63bp"},{"vulnerability":"VCID-26a9-9zz3-wfhh"},{"vulnerability":"VCID-2trm-w3ww-cfhk"},{"vulnerability":"VCID-3bw4-631f-e7h6"},{"vulnerability":"VCID-3se4-qv6j-xqfq"},{"vulnerability":"VCID-3vdg-5g64-wkbt"},{"vulnerability":"VCID-46ad-1k9n-j3hm"},{"vulnerability":"VCID-4cdt-ycjx-6ub4"},{"vulnerability":"VCID-4k7p-3g95-n7dm"},{"vulnerability":"VCID-4pra-prf3-1uff"},{"vulnerability":"VCID-4rmg-db7g-u3hs"},{"vulnerability":"VCID-5ktg-bhh1-ubbz"},{"vulnerability":"VCID-5u88-jt28-cfb6"},{"vulnerability":"VCID-6dax-cddv-7bbs"},{"vulnerability":"VCID-6jqj-2qwn-8qd9"},{"vulnerability":"VCID-8k1q-b2kj-w7hh"},{"vulnerability":"VCID-8tv5-zxmm-r3fk"},{"vulnerability":"VCID-97zm-r9b6-uqdu"},{"vulnerability":"VCID-b57c-x3pw-7fb7"},{"vulnerability":"VCID-bhdk-jmss-4qc8"},{"vulnerability":"VCID-byu1-7n9c-5fes"},{"vulnerability":"VCID-c4xu-szkm-1kh6"},{"vulnerability":"VCID-ee3z-24pr-kqcm"},{"vulnerability":"VCID-ejhc-6yqt-gkgv"},{"vulnerability":"VCID-evcg-2z3p-gbch"},{"vulnerability":"VCID-h9hz-vur7-kyhg"},{"vulnerability":"VCID-j22f-mbqe-a7dk"},{"vulnerability":"VCID-p2fk-8snj-x7dy"},{"vulnerability":"VCID-psaa-jdr7-e3fm"},{"vulnerability":"VCID-q3p3-tgay-6kcs"},{"vulnerability":"VCID-qpfc-3296-9ub3"},{"vulnerability":"VCID-qsma-2ufh-jybe"},{"vulnerability":"VCID-rdub-9bhg-nbc6"},{"vulnerability":"VCID-rk2f-yqbb-nyd2"},{"vulnerability":"VCID-rt5n-e4wq-p3gh"},{"vulnerability":"VCID-tjgh-waa3-wqgk"},{"vulnerability":"VCID-upju-tcz7-efg1"},{"vulnerability":"VCID-uv8m-bj4c-8fes"},{"vulnerability":"VCID-vv23-mvyn-87hg"},{"vulnerability":"VCID-wd4s-jxuf-skbp"},{"vulnerability":"VCID-wz1m-aeaf-nkg7"},{"vulnerability":"VCID-xqpz-y83m-4uc4"},{"vulnerability":"VCID-ye1t-qhtx-sucm"},{"vulnerability":"VCID-z9rm-9p2q-wfag"},{"vulnerability":"VCID-zkeg-d5d5-vbda"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/xen@4.14.6-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/943263?format=json","purl":"pkg:deb/debian/xen@4.17.5%2B72-g01140da4e8-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qpfc-3296-9ub3"},{"vulnerability":"VCID-upju-tcz7-efg1"},{"vulnerability":"VCID-wx6w-6y5m-fugn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/xen@4.17.5%252B72-g01140da4e8-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/943267?format=json","purl":"pkg:deb/debian/xen@4.20.2%2B37-g61ff35323e-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qsma-2ufh-jybe"},{"vulnerability":"VCID-wx6w-6y5m-fugn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/xen@4.20.2%252B37-g61ff35323e-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/943266?format=json","purl":"pkg:deb/debian/xen@4.20.2%2B37-g61ff35323e-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-qsma-2ufh-jybe"},{"vulnerability":"VCID-wx6w-6y5m-fugn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/xen@4.20.2%252B37-g61ff35323e-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/74594?format=json","purl":"pkg:ebuild/app-emulation/xen@4.2.2-r1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/xen@4.2.2-r1"},{"url":"http://public2.vulnerablecode.io/api/packages/74597?format=json","purl":"pkg:ebuild/app-emulation/xen-pvgrub@4.2.2-r1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/xen-pvgrub@4.2.2-r1"},{"url":"http://public2.vulnerablecode.io/api/packages/74598?format=json","purl":"pkg:ebuild/app-emulation/xen-pvgrub@4.2.2-r3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/xen-pvgrub@4.2.2-r3"},{"url":"http://public2.vulnerablecode.io/api/packages/74595?format=json","purl":"pkg:ebuild/app-emulation/xen-tools@4.2.2-r1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/xen-tools@4.2.2-r1"},{"url":"http://public2.vulnerablecode.io/api/packages/74596?format=json","purl":"pkg:ebuild/app-emulation/xen-tools@4.2.2-r3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/xen-tools@4.2.2-r3"}],"affected_packages":[],"references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5525.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5525.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2012-5525","reference_id":"","reference_type":"","scores":[{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.9147","published_at":"2026-05-14T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91332","published_at":"2026-04-01T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91336","published_at":"2026-04-02T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91346","published_at":"2026-04-04T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91354","published_at":"2026-04-07T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91366","published_at":"2026-04-08T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91373","published_at":"2026-04-09T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.9138","published_at":"2026-04-11T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91382","published_at":"2026-04-13T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91407","published_at":"2026-04-21T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91405","published_at":"2026-04-18T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91417","published_at":"2026-04-24T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91415","published_at":"2026-04-26T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91414","published_at":"2026-04-29T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91429","published_at":"2026-05-05T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91444","published_at":"2026-05-07T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91454","published_at":"2026-05-09T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91452","published_at":"2026-05-11T12:55:00Z"},{"value":"0.06889","scoring_system":"epss","scoring_elements":"0.91462","published_at":"2026-05-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2012-5525"},{"reference_url":"http://secunia.com/advisories/51397","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/51397"},{"reference_url":"http://secunia.com/advisories/55082","reference_id":"","reference_type":"","scores":[],"url":"http://secunia.com/advisories/55082"},{"reference_url":"http://security.gentoo.org/glsa/glsa-201309-24.xml","reference_id":"","reference_type":"","scores":[],"url":"http://security.gentoo.org/glsa/glsa-201309-24.xml"},{"reference_url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80480","reference_id":"","reference_type":"","scores":[],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80480"},{"reference_url":"http://www.openwall.com/lists/oss-security/2012/12/03/6","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2012/12/03/6"},{"reference_url":"http://www.osvdb.org/88133","reference_id":"","reference_type":"","scores":[],"url":"http://www.osvdb.org/88133"},{"reference_url":"http://www.securityfocus.com/bid/56805","reference_id":"","reference_type":"","scores":[],"url":"http://www.securityfocus.com/bid/56805"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=877404","reference_id":"877404","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877404"},{"reference_url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*","reference_id":"cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5525","reference_id":"CVE-2012-5525","reference_type":"","scores":[{"value":"4.7","scoring_system":"cvssv2","scoring_elements":"AV:L/AC:M/Au:N/C:N/I:N/A:C"}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5525"},{"reference_url":"https://security.gentoo.org/glsa/201309-24","reference_id":"GLSA-201309-24","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201309-24"},{"reference_url":"https://xenbits.xen.org/xsa/advisory-32.html","reference_id":"XSA-32","reference_type":"","scores":[],"url":"https://xenbits.xen.org/xsa/advisory-32.html"}],"weaknesses":[],"exploits":[{"date_added":null,"description":"This module causes a hypervisor crash in Xen 4.2.0 when invoked from a\n          paravirtualized VM, including from dom0.  Successfully tested on Debian 7\n          3.2.0-4-amd64 with Xen 4.2.0.","required_action":null,"due_date":null,"notes":"Stability:\n  - crash-service-down\nReliability: []\nSideEffects:\n  - ioc-in-logs\n","known_ransomware_campaign_use":false,"source_date_published":null,"exploit_type":null,"platform":"Linux","source_date_updated":null,"data_source":"Metasploit","source_url":"https://github.com/rapid7/metasploit-framework/tree/master/modules/post/linux/dos/xen_420_dos.rb"}],"severity_range_score":"4.7 - 4.7","exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vmj3-kufn-skcw"}