7.8

CVE-2017-17564

An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging incorrect error handling for reference counting in shadow mode.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xen ≫ Xen Version <= 4.9.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.268
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.1 6
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://security.gentoo.org/glsa/201801-14
https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html
https://support.citrix.com/article/CTX232096
https://www.debian.org/security/2018/dsa-4112
http://www.openwall.com/lists/oss-security/2017/12/12/3
Mailing List
http://www.securityfocus.com/bid/102172
http://www.securitytracker.com/id/1040770
https://xenbits.xen.org/xsa/advisory-250.html
Patch
Vendor Advisory
Mitigation