Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-17045

Опубликовано: 28 нояб. 2017
Источник: redhat
CVSS3: 8.5
EPSS Низкий

Описание

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5xenNot affected

Показывать по

Дополнительная информация

Статус:

Important
https://bugzilla.redhat.com/show_bug.cgi?id=1513336xen: Missing p2m error checking in PoD code (XSA-247)

EPSS

Процентиль: 34%
0.00427
Низкий

8.5 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 8 лет назад

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.

CVSS3: 8.8
nvd
больше 8 лет назад

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.

CVSS3: 8.8
debian
больше 8 лет назад

An issue was discovered in Xen through 4.9.x allowing HVM guest OS use ...

CVSS3: 8.8
github
около 4 лет назад

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.

CVSS3: 8
fstec
больше 8 лет назад

Уязвимость гипервизора Xen, связанная с использованием памяти после её освобождения, позволяющая нарушителю получить конфиденциальную информацию, повысить свои привилегии или вызвать аварийное завершение работы приложения

EPSS

Процентиль: 34%
0.00427
Низкий

8.5 High

CVSS3