CVE-2017-10918

EPSS 1.67%
Veröffentlicht 05.07.2017 01:29:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Xen ≫ Xen Version <= 4.8.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.67%	0.813

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	3.9	6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://security.gentoo.org/glsa/201708-03

http://www.debian.org/security/2017/dsa-3969

https://security.gentoo.org/glsa/201710-17

http://www.securityfocus.com/bid/99161

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1038732

https://xenbits.xen.org/xsa/advisory-222.html

Third Party Advisory

Mailing List

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2017-10918

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-10918

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-10918

EUVD