PT-2017-11607 · Xen · Xen

Julien Grall · Publicado 2017-07-05 · Atualizado 2019-10-03 · CVE-2017-10919

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.9

Description The issue is related to the mishandling of virtual interrupt injection, allowing guest OS users to cause a denial of service, which results in a hypervisor crash.

Recommendations For Xen versions prior to 4.9, update to version 4.9 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2017-10919

DSA-3969-1

Produtos afetados

Xen

Referências · 15

• https://nvd.nist.gov/vuln/detail/CVE-2017-10919 · Nota de Segurança
• https://osv.dev/vulnerability/DSA-3969-1 · Aviso do Fabricante
• http://securityfocus.com/bid/99159 · Nota
• http://debian.org/security/2017/dsa-3969 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-10919 · Nota de Segurança
• https://security.gentoo.org/glsa/201708-03 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-10919 · Aviso do Fabricante
• https://osv.dev/vulnerability/ALPINE-CVE-2017-10919 · Aviso do Fabricante
• https://xenbits.xen.org/xsa/advisory-223.html · Nota
• https://security.alpinelinux.org/vuln/CVE-2017-10919 · Nota
• https://security-tracker.debian.org/tracker/CVE-2017-10919 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-10919 · Aviso do Fabricante
• http://securitytracker.com/id/1038733 · Nota
• https://osv.dev/vulnerability/CVE-2017-10919 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-10919 · Aviso do Fabricante