CVE-2017-14318: Null Pointer Dereference
An issue was discovered in Xen 4.5.x through 4.9.x. The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mapping to the calling domain exists for the page in question. However, the function does not check to see if the owning domain actually has a grant table or not. Some special domains, such as DOMIDXEN, DOMIDIO and DOMIDCOW are created without grant tables. Hence, if gnttabcacheflush operates on a page owned by these special domains, it will attempt to dereference a NULL pointer in the domain struct.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14318?
CVE-2017-14318 has a high severity rating due to the potential for unauthorized access and manipulation of memory.
How do I fix CVE-2017-14318?
To fix CVE-2017-14318, upgrade to Xen versions 4.11.4, 4.14.6, or later versions that address this vulnerability.
What versions are affected by CVE-2017-14318?
CVE-2017-14318 affects Xen versions 4.5.x through 4.9.x.
What is the nature of the vulnerability in CVE-2017-14318?
CVE-2017-14318 is related to improper handling of grant table operations, potentially allowing unauthorized page access.
Can CVE-2017-14318 lead to data breaches?
Yes, CVE-2017-14318 can potentially lead to data breaches if exploited by an attacker.