CVE-2017-8903

Опубликовано: 11 мая 2017

Источник: debian

Описание

Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-213.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
xen	fixed	4.8.1-1+deb9u1		package

Примечания

https://xenbits.xen.org/xsa/advisory-213.html

Связанные уязвимости

CVE-2017-8903

CVSS3: 8.8

ubuntu

больше 8 лет назад

Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-213.

CVE-2017-8903

CVSS3: 8.5

redhat

почти 9 лет назад

Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-213.

CVE-2017-8903

CVSS3: 8.8

nvd

больше 8 лет назад

Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-213.

GHSA-qx4f-g697-2347

CVSS3: 8.8

github

больше 3 лет назад

Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-213.

BDU:2017-01291

fstec

больше 8 лет назад

Уязвимость гипервизора Xen, позволяющая нарушителю выполнить произвольный код