Описание
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- MitigationPatchVendor Advisory
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- MitigationPatchVendor Advisory
Уязвимые конфигурации
EPSS
8.8 High
CVSS3
7.2 High
CVSS2
Дефекты
Связанные уязвимости
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595.
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595.
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS ...
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595.
Уязвимость интерпретации структуры данных union гипервизора Xen, связанная с теневой подкачкой данных, позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии в системе
EPSS
8.8 High
CVSS3
7.2 High
CVSS2