CVE-2017-10917

Description

Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information, aka XSA-221.

CVSS Metrics

• v3.0•CRITICAL•Score: 9.1CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
• v2.0•HIGH•Score: 9.4AV:N/AC:L/Au:N/C:C/I:N/A:C

EPSS Trends

Current EPSS score: 0.84%• Percentile: 75%

Techniques & Countermeasures

• CWE-476•NULL Pointer Dereference

  The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

• xen•xen

  ≤ 4.8.1

References (5)

• https://security.gentoo.org/glsa/201708-03
• http://www.debian.org/security/2017/dsa-3969
• https://xenbits.xen.org/xsa/advisory-221.html
• http://www.securityfocus.com/bid/99157
• http://www.securitytracker.com/id/1038731