PT-2017-14116 · Xen+1 · Xen+1

Jann Horn

Publicado

2017-10-18

Atualizado

2018-10-19

CVE-2017-15588

CVSS v3.1

7.8

Alta

Vetor

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.10

Description A race condition in Xen can cause a stale TLB entry, allowing x86 PV guest OS users to execute arbitrary code on the host OS.

Recommendations For versions prior to 4.10, update to version 4.10 or later to resolve the issue.

Correção

Race Condition

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2017-15588

DLA-1181-1

DLA-1549-1

DSA-4050-1

OPENSUSE-SU-2017_2821-1

OPENSUSE-SU-2017_2916-1

SUSE-SU-2017:2812-1

SUSE-SU-2017:2815-1

SUSE-SU-2017:2856-1

SUSE-SU-2017:2864-1

SUSE-SU-2017:2873-1

SUSE-SU-2017_2812-1

SUSE-SU-2017_2815-1

SUSE-SU-2017_2856-1

SUSE-SU-2017_2864-1

SUSE-SU-2017_2873-1

Suse

Xen