CVE-2017-10920: Buffer Overflow
The grant-table feature in Xen through 4.8.x mishandles a GNTMAPdevicemap and GNTMAPhostmap mapping, when followed by only a GNTMAPhostmap unmapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 1.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10920?
CVE-2017-10920 is classified as a high severity vulnerability due to its potential to cause denial of service and memory corruption.
How do I fix CVE-2017-10920?
To fix CVE-2017-10920, upgrade your Xen hypervisor to version 4.8.2 or later.
What are the potential consequences of exploiting CVE-2017-10920?
Exploiting CVE-2017-10920 can lead to denial of service and unauthorized privileged access to the host operating system.
Which versions of Xen are affected by CVE-2017-10920?
CVE-2017-10920 affects Xen versions up to and including 4.8.1.
Who is at risk for CVE-2017-10920?
Users of Xen versions 4.8.x are at risk for CVE-2017-10920 if they have not applied the necessary updates.