Vulnerability Details : CVE-2017-15590
An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled.
Vulnerability category: Denial of service
Products affected by CVE-2017-15590
- cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-15590
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 25 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-15590
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST | |
|
8.8
|
HIGH | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
2.0
|
6.0
|
NIST |
References for CVE-2017-15590
-
http://www.securitytracker.com/id/1039568
Xen Multiple Flaws on x86 Systems Let Local Guest System Users Obtain Memory Contents and Potentially Sensitive Information, Deny Service on the Host System, and Gain Elevated Privileges on the Host SThird Party Advisory;VDB Entry
-
http://www.securityfocus.com/bid/101500
Xen CVE-2017-15590 Multiple Denial of Service VulnerabilitiesThird Party Advisory;VDB Entry
-
https://support.citrix.com/article/CTX228867
Citrix XenServer Multiple Security Updates
-
https://www.debian.org/security/2017/dsa-4050
Debian -- Security Information -- DSA-4050-1 xen
-
https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
[SECURITY] [DLA 1549-1] xen security update
-
https://security.gentoo.org/glsa/201801-14
Xen: Multiple vulnerabilities (GLSA 201801-14) — Gentoo security
-
https://xenbits.xen.org/xsa/advisory-237.html
XSA-237 - Xen Security AdvisoriesPatch;Vendor Advisory
Jump to