← Vulnerability feed

Vulnerability record · CVE-2017-12134 · published 24 August 2017

CVE-2017-12134: Xen vulnerability

Xen · Xen

The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation.

8.8 CVSS 3.0 High EPSS 0.50% · top 59.8% CWE-682 · CWE-682
8.8CVSS 3.0 base score, v2 7.2
0.50%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
20References
17 Jun 2026Last modified by NVD

Description

The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.debian.org/security/2017/dsa-3981
http://www.openwall.com/lists/oss-security/2017/08/15/4 Mailing ListMitigationThird Party Advisory
http://www.securityfocus.com/bid/100343 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039176 Third Party AdvisoryVDB Entry
http://xenbits.xen.org/xsa/advisory-229.html MitigationPatchVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1477656 Issue TrackingMitigationPatchThird Party Advisory
https://security.gentoo.org/glsa/201801-14
https://support.citrix.com/article/CTX225941 PatchThird Party Advisory
https://usn.ubuntu.com/3655-1/
https://usn.ubuntu.com/3655-2/
http://www.debian.org/security/2017/dsa-3981
http://www.openwall.com/lists/oss-security/2017/08/15/4 Mailing ListMitigationThird Party Advisory
http://www.securityfocus.com/bid/100343 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039176 Third Party AdvisoryVDB Entry
http://xenbits.xen.org/xsa/advisory-229.html MitigationPatchVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1477656 Issue TrackingMitigationPatchThird Party Advisory
https://security.gentoo.org/glsa/201801-14
https://support.citrix.com/article/CTX225941 PatchThird Party Advisory
https://usn.ubuntu.com/3655-1/
https://usn.ubuntu.com/3655-2/

Track CVE-2017-12134 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2017-10912Xen vulnerabilityXen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217.EPSS 2.7%10.0CVE-2017-10918Xen improper input validation vulnerabilityXen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access…EPSS 3.7%10.0CVE-2017-10920Xen memory buffer overflow vulnerabilityThe grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unma…EPSS 2.5%10.0CVE-2017-10921Xen memory buffer overflow vulnerabilityThe grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows…EPSS 2.5%10.0CVE-2015-8104Xen vulnerabilityThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic o…EPSS 2.5%10.0CVE-2014-4947Citrix xenserver memory buffer overflow vulnerabilityBuffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and earlier has unspecified impact and attack vectors.EPSS 5.4%9.9CVE-2016-9603Qemu heap-based buffer overflow vulnerabilityA heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a V…EPSS 4.4%9.9CVE-2017-2620Qemu out-of-bounds write vulnerabilityQuick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could…EPSS 3.6%

Source: NIST National Vulnerability Database (record CVE-2017-12134), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.