Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-10921

Опубликовано: 05 июл. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 10
CVSS3: 10

Описание

The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2.

РелизСтатусПримечание
devel

released

4.9.0-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [4.4.2-0ubuntu0.14.04.12]]
esm-infra-legacy/xenial

released

4.6.5-0ubuntu1.2
esm-infra/xenial

released

4.6.5-0ubuntu1.2
precise/esm

DNE

trusty

released

4.4.2-0ubuntu0.14.04.12
trusty/esm

DNE

trusty was released [4.4.2-0ubuntu0.14.04.12]
upstream

needs-triage

vivid/ubuntu-core

DNE

xenial

released

4.6.5-0ubuntu1.2

Показывать по

EPSS

Процентиль: 84%
0.02549
Низкий

10 Critical

CVSS2

10 Critical

CVSS3

Связанные уязвимости

CVSS3: 8.5
redhat
около 9 лет назад

The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2.

CVSS3: 10
nvd
около 9 лет назад

The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2.

CVSS3: 10
debian
около 9 лет назад

The grant-table feature in Xen through 4.8.x does not ensure sufficien ...

CVSS3: 10
github
больше 4 лет назад

The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2.

fstec
около 9 лет назад

Уязвимость компонента grant-table гипервизора Xen, позволяющая нарушителю вызвать отказ в обслуживании или получить привилегированный доступ к хосту

EPSS

Процентиль: 84%
0.02549
Низкий

10 Critical

CVSS2

10 Critical

CVSS3