CVE-2017-15590

Опубликовано: 18 окт. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 4.6

EPSS Низкий

Описание

An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled.

Ссылки

http://www.securityfocus.com/bid/101500
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039568
Third Party Advisory
VDB Entry
https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
https://security.gentoo.org/glsa/201801-14
https://support.citrix.com/article/CTX228867
https://www.debian.org/security/2017/dsa-4050
https://xenbits.xen.org/xsa/advisory-237.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/101500
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039568
Third Party Advisory
VDB Entry
https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
https://security.gentoo.org/glsa/201801-14
https://support.citrix.com/article/CTX228867
https://www.debian.org/security/2017/dsa-4050
https://xenbits.xen.org/xsa/advisory-237.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 22%

0.00071

Низкий

8.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2017-15590

CVSS3: 8.8

ubuntu

больше 8 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled.

CVE-2017-15590

CVSS3: 6.8

redhat

больше 8 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled.

CVE-2017-15590

CVSS3: 8.8

debian

больше 8 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 guest OS use ...

GHSA-6c5v-637f-m63f

CVSS3: 8.8

github

больше 3 лет назад

An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled.

openSUSE-SU-2017:2821-1

suse-cvrf

больше 8 лет назад

Security update for xen

EPSS

Процентиль: 22%

0.00071

Низкий

8.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

NVD-CWE-noinfo