Approved changes feed: RSS · Atom

cpe:2.3:o:xen:xen:*:rc7:*:*:*:*:*:*

part: o version: * update: rc7

VendorXen (f270236f-a538-5294-a46e-e4b9797d2f33)
ProductXen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-15597 vulnerable 2026-06-08 05:08:59.012464 Details available
An issue was discovered in Xen through 4.9.x. Grant copying code made an implication that any grant pin would be accompanied by a suitable page reference. Other portions of code, however, did not match up with that assumption. When such a grant copy operation is being done on a grant of a dying domain, the assumption turns out wrong. A malicious guest administrator can cause hypervisor memory corruption, most likely resulting in host crash and a Denial of Service. Privilege escalation and information leaks cannot be ruled out.
Published: 2017-10-30T14:00:00.000Z
Updated: 2024-08-05T19:57:27.292Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.