PT-2017-2434 · Xen+1 · Xen+1

Jan Beulich

·

Publicado

2017-07-05

·

Atualizado

2019-10-03

·

CVE-2017-10921

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.9
Description The issue is related to the grant-table feature, which does not ensure sufficient type counts for a GNTMAP device map and GNTMAP host map mapping. This allows guest OS users to cause a denial of service, including count mismanagement and memory corruption, or obtain privileged host OS access. The vulnerability can be exploited by a remote attacker to cause a denial of service or gain privileged access to the host.
Recommendations For Xen versions prior to 4.9, update to a version that includes the fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-264

Identificadores relacionados

BDU:2017-01639
CVE-2017-10921
DLA-1132-1
DSA-3969-1
OPENSUSE-SU-2017_1826-1
SUSE-SU-2017:1795-1
SUSE-SU-2017:1812-1

Produtos afetados

Suse
Xen