Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-17045

Опубликовано: 28 нояб. 2017
Источник: redhat
CVSS3: 8.5

Описание

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5xenNot affected

Показывать по

Дополнительная информация

Статус:

Important
https://bugzilla.redhat.com/show_bug.cgi?id=1513336xen: Missing p2m error checking in PoD code (XSA-247)

8.5 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 8 лет назад

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.

CVSS3: 8.8
nvd
около 8 лет назад

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.

CVSS3: 8.8
debian
около 8 лет назад

An issue was discovered in Xen through 4.9.x allowing HVM guest OS use ...

CVSS3: 8.8
github
больше 3 лет назад

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.

CVSS3: 8
fstec
около 8 лет назад

Уязвимость гипервизора Xen, связанная с использованием памяти после её освобождения, позволяющая нарушителю получить конфиденциальную информацию, повысить свои привилегии или вызвать аварийное завершение работы приложения

8.5 High

CVSS3