CVE-2017-12135: High severity XEN Xen vulnerability
ISSUE DESCRIPTION =================
Code to handle copy operations on transitive grants has built in retry logic, involving a function reinvoking itself with unchanged parameters. Such use assumes that the compiler would also translate this to a so called "tail call" when generating machine code. Empirically, this is not commonly the case, allowing for theoretically unbounded nesting of such function calls.
IMPACT ======
A malicious or buggy guest may be able to crash Xen. Privilege escalation and information leaks cannot be ruled out.
VULNERABLE SYSTEMS ==================
All versions of Xen are vulnerable.
MITIGATION ==========
There is no known mitigation.
External References:
http://xenbits.xen.org/xsa/advisory-226.html
Other sources
Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12135?
The severity of CVE-2017-12135 is rated high with a score of 8.8.
How do I fix CVE-2017-12135?
To fix CVE-2017-12135, apply the latest security patches or upgrades provided by the software vendor.
What types of systems are affected by CVE-2017-12135?
CVE-2017-12135 affects various versions of Xen, Citrix XenServer, and Debian Linux.
Can CVE-2017-12135 be exploited remotely?
CVE-2017-12135 primarily requires local OS guest access, making remote exploitation unlikely.
What are the potential impacts of CVE-2017-12135?
The potential impacts of CVE-2017-12135 include denial of service and possible unauthorized privilege escalation.