CVE-2017-15593: Medium severity XEN Xen vulnerability
Published Oct 18, 2017
·Updated
An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (memory leak) because reference counts are mishandled.
Affected Software
2 affected componentsFixes available
debian/xen
4.11.4+107-gef32c7afa2-14.14.6-14.14.5+94-ge49571868d-14.17.1+2-gb773c48e36-14.17.2+55-g0b56bed864-1
XEN Xen<=4.9.0
Remediation
Patch Available
Event History
Oct 18, 2017
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15593?
CVE-2017-15593 is classified as a denial of service vulnerability due to a memory leak in Xen.
2
How do I fix CVE-2017-15593?
To mitigate CVE-2017-15593, upgrade to Xen versions 4.11.4+107-gef32c7afa2-1 or later.
3
What versions of Xen are affected by CVE-2017-15593?
CVE-2017-15593 affects Xen versions up to and including 4.9.x.
4
Can CVE-2017-15593 affect all Xen installations?
CVE-2017-15593 specifically impacts x86 PV guest OS users in Xen environments.
5
Is there a known workaround for CVE-2017-15593?
There are no known workarounds for CVE-2017-15593 other than upgrading to a secure version.