CVE-2017-10921: Buffer Overflow
The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAPdevicemap and GNTMAPhostmap mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10921?
CVE-2017-10921 has a medium severity rating due to its potential for denial of service and memory corruption.
How do I fix CVE-2017-10921?
To fix CVE-2017-10921, upgrade to Xen version 4.8.2 or later, which addresses the vulnerability.
What types of systems are affected by CVE-2017-10921?
CVE-2017-10921 affects Xen versions up to and including 4.8.1, specifically under configurations using GNTMAP_device_map and GNTMAP_host_map.
What are the potential impacts of CVE-2017-10921?
The potential impacts of CVE-2017-10921 include denial of service through count mismanagement and the possibility of privileged host OS access.
Is CVE-2017-10921 specific to certain guest OS users?
Yes, CVE-2017-10921 allows guest OS users to exploit the vulnerability, causing mismanagement of resources.