An issue was discovered in Xen through 4.9.x. Grant copying code made an implication that any grant pin would be accompanied by a suitable page reference. Other portions of code, however, did not match up with that assumption. When such a grant copy operation is being done on a grant of a dying domain, the assumption turns out wrong. A malicious guest administrator can cause hypervisor memory corruption, most likely resulting in host crash and a Denial of Service. Privilege escalation and information leaks cannot be ruled out.
References
Configurations
History
21 Nov 2024, 03:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.openwall.com/lists/oss-security/2017/10/24/3 - Issue Tracking, Mailing List, Mitigation, Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/101564 - Issue Tracking, Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1039653 - Issue Tracking, Third Party Advisory, VDB Entry | |
| References | () http://xenbits.xen.org/xsa/advisory-236.html - Issue Tracking, Patch, Vendor Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html - | |
| References | () https://support.citrix.com/article/CTX229057 - Issue Tracking, Third Party Advisory | |
| References | () https://www.debian.org/security/2017/dsa-4050 - |
Information
Published : 2017-10-30 14:29
Updated : 2024-11-21 03:14
NVD link : CVE-2017-15597
Mitre link : CVE-2017-15597
CVE.ORG link : CVE-2017-15597
JSON object : View
Products Affected
xen
- xen