CVE-2017-14431: Medium severity xen xapi vulnerability
Published Sep 13, 2017
·Updated
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.
Affected Software
51 affected components
XEN Xen=3.3.0
XEN Xen=3.3.1
XEN Xen=3.3.2
XEN Xen=3.4.0
XEN Xen=3.4.1
XEN Xen=3.4.2
XEN Xen=3.4.3
XEN Xen=3.4.4
XEN Xen=4.0.0
XEN Xen=4.0.1
XEN Xen=4.0.2
XEN Xen=4.0.3
XEN Xen=4.0.4
XEN Xen=4.1.0
XEN Xen=4.1.1
XEN Xen=4.1.2
XEN Xen=4.1.3
XEN Xen=4.1.4
XEN Xen=4.1.5
XEN Xen=4.1.6
XEN Xen=4.1.6.1
XEN Xen=4.2.0
XEN Xen=4.2.1
XEN Xen=4.2.2
XEN Xen=4.2.3
XEN Xen=4.2.4
XEN Xen=4.2.5
XEN Xen=4.3.0
XEN Xen=4.3.1
XEN Xen=4.3.2
XEN Xen=4.3.3
XEN Xen=4.3.4
XEN Xen=4.4.0
XEN Xen=4.4.0-rc1
XEN Xen=4.4.1
XEN Xen=4.4.2
XEN Xen=4.4.3
XEN Xen=4.4.4
XEN Xen=4.5.0
XEN Xen=4.5.1
XEN Xen=4.5.2
XEN Xen=4.5.3
XEN Xen=4.5.5
XEN Xen=4.6.0
XEN Xen=4.6.1
XEN Xen=4.6.2
XEN Xen=4.6.4
XEN Xen=4.6.5
XEN Xen=4.7.1
XEN Xen=4.8.0
XEN Xen=4.8.1
Remediation
Patch Available
Event History
Sep 13, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14431?
CVE-2017-14431 is classified as a vulnerability that can cause denial of service due to memory leaks.
2
How do I fix CVE-2017-14431?
To fix CVE-2017-14431, upgrade to a fixed version of Xen that addresses this memory leak vulnerability.
3
What versions of Xen are affected by CVE-2017-14431?
CVE-2017-14431 affects Xen versions 3.3 through 4.8.x.
4
What exploits exist for CVE-2017-14431?
CVE-2017-14431 can be exploited by a guest OS user to repeatedly reboot, causing memory consumption on the host.
5
Is there a workaround for CVE-2017-14431?
Currently, there are no specific workarounds for CVE-2017-14431; updating to a patched version is recommended.