Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2012-5512

14
FAUCET Score

CVE-2012-5512 describes an array index error in the HVMOP_set_mem_access handler within Xen 4.1, specifically impacting Citrix XenServer. This vulnerability allows local HVM guest OS administrators to trigger a denial of service or potentially access sensitive information. With a low attack complexity and requiring local access and authentication, its impact is rated as partial for confidentiality and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
4.1.0CPE matchmatch criteria
cpe:2.3:a:citrix:xenserver:4.1.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

3.2LOW

AV:L/AC:L/Au:S/C:P/I:N/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Exploitability Score
3.1
Impact Score
4.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.41%
Probability of exploitation in next 30 days
EPSS Percentile
33.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0041 is in the 89th percentile among its peer group of 1,509 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

citrixpatch availablevia nvd_reference
View patch
gogspatch availablevia llm_extracted

Vendor Advisories (2)

redhatCVE-2012-5512Moderate

kernel: xen: HVMOP_get_mem_access crash / HVMOP_set_mem_access information leak

Dec 3, 2012
gogsllm-gogs-b2e2a44acf0ba4b4

HVMOP_get_mem_access crash / HVMOP_set_mem_access information leak

Dec 3, 2012

References

lists.opensuse.org / opensuse-security-announce/2012-12/msg00001.html
lists.opensuse.org / opensuse-security-announce/2012-12/msg00018.html
lists.opensuse.org / opensuse-security-announce/2012-12/msg00019.html
lists.opensuse.org / opensuse-security-announce/2013-01/msg00011.html
secunia.com / advisories/51397
Vendor Advisory
secunia.com / advisories/51486
Vendor Advisory
secunia.com / advisories/51487
Vendor Advisory
secunia.com / advisories/55082
security.gentoo.org / glsa/glsa-201309-24.xml
exchange.xforce.ibmcloud.com / vulnerabilities/80481
support.citrix.com / article/CTX135777
PatchVendor Advisory
openwall.com / lists/oss-security/2012/12/03/7
osvdb.org / 88132
securityfocus.com / bid/56799