CVE-2017-15596: Medium severity XEN Xen vulnerability
Published Oct 18, 2017
·Updated
An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of lock mishandling upon detection of an add-to-physmap error.
Affected Software
73 affected components
XEN Xen=4.4.0
XEN Xen=4.4.0-rc1
XEN Xen=4.4.0-rc2
XEN Xen=4.4.0-rc3
XEN Xen=4.4.0-rc4
XEN Xen=4.4.0-rc5
XEN Xen=4.4.0-rc6
XEN Xen=4.4.1
XEN Xen=4.4.1-rc1
XEN Xen=4.4.1-rc2
XEN Xen=4.4.2
XEN Xen=4.4.2-rc1
XEN Xen=4.4.2-rc2
XEN Xen=4.4.3
XEN Xen=4.4.3-rc1
XEN Xen=4.4.4
XEN Xen=4.5.0
XEN Xen=4.5.0-rc1
XEN Xen=4.5.0-rc2
XEN Xen=4.5.0-rc3
XEN Xen=4.5.0-rc4
XEN Xen=4.5.1
XEN Xen=4.5.1-rc1
XEN Xen=4.5.1-rc2
XEN Xen=4.5.2
XEN Xen=4.5.3
XEN Xen=4.5.4
XEN Xen=4.5.5
XEN Xen=4.6.0
XEN Xen=4.6.0-rc1
XEN Xen=4.6.0-rc2
XEN Xen=4.6.0-rc3
XEN Xen=4.6.0-rc4
XEN Xen=4.6.0-rc5
XEN Xen=4.6.1
XEN Xen=4.6.2
XEN Xen=4.6.3
XEN Xen=4.6.4
XEN Xen=4.6.5
XEN Xen=4.6.6
XEN Xen=4.7.0
XEN Xen=4.7.0-rc1
XEN Xen=4.7.0-rc2
XEN Xen=4.7.0-rc3
XEN Xen=4.7.0-rc4
XEN Xen=4.7.0-rc5
XEN Xen=4.7.0-rc6
XEN Xen=4.7.1
XEN Xen=4.7.2
XEN Xen=4.7.3
XEN Xen=4.8.0
XEN Xen=4.8.0-rc1
XEN Xen=4.8.0-rc2
XEN Xen=4.8.0-rc3
XEN Xen=4.8.0-rc4
XEN Xen=4.8.0-rc5
XEN Xen=4.8.0-rc6
XEN Xen=4.8.0-rc7
XEN Xen=4.8.0-rc8
XEN Xen=4.8.1
XEN Xen=4.8.2
XEN Xen=4.9.0
XEN Xen=4.9.0-rc1
XEN Xen=4.9.0-rc1.1
XEN Xen=4.9.0-rc1.2
XEN Xen=4.9.0-rc2
XEN Xen=4.9.0-rc3
XEN Xen=4.9.0-rc4
XEN Xen=4.9.0-rc5
XEN Xen=4.9.0-rc6
XEN Xen=4.9.0-rc7
XEN Xen=4.9.0-rc8
XEN Xen=4.9.0-rc9
Remediation
Patch Available
Event History
Oct 18, 2017
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15596?
CVE-2017-15596 has been rated as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2017-15596?
To fix CVE-2017-15596, it is recommended to upgrade to a patched version of Xen that addresses this vulnerability.
3
What versions of Xen are affected by CVE-2017-15596?
CVE-2017-15596 affects Xen version 4.4.x through 4.9.x.
4
What type of attack is possible with CVE-2017-15596?
CVE-2017-15596 allows ARM guest OS users to cause a denial of service by mismanaging locks.
5
Can CVE-2017-15596 be exploited remotely?
Yes, CVE-2017-15596 can potentially be exploited remotely if an attacker has access to an ARM guest in a vulnerable Xen environment.