Xen Security Advisory CVE-2017-10912 [page transfer may allow PV guest to elevate privilege]
by CIRT Team
Description: Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217.
Impact: A malicious pair of guests may be able to access all of system memory, allowing for all of privilege escalation, host crashes, and information leaks.
Mitigation: Updates are available. Please check specific vendor advisory for more information.
Reference URL’s:
- https://xenbits.xen.org/xsa/advisory-217.html
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-10912
Recommended Posts
Active Exploitation of Critical F5 BIG – IP Vulnerability (CVE–2023-46747) Uncovered in Bangladesh
06 Nov 2024 - Security Advisories & Alerts
Subscribe here
MEMBER OF:
