ALPINE-CVE-2017-17045

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2017-17045
Published: 28 Nov 2017, 23:29
Last modified:19 Nov 2025, 06:09

Vulnerability Summary

Overall Risk (default)
medium
35/100
CVSS Score
8.8 HIGH
3.0 (osv_alpine)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 Nov 2017, 23:29
Published
Vulnerability first disclosed
19 Nov 2025, 06:09
Last Modified
Vulnerability information updated

Description

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.

CVSS Metrics

  • v3.0•HIGH•Score: 8.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected Systems

  • alpine•xen

    < 4.7.3-r2 | < 4.8.2-r2

References (1)