CVE-2017-17045: Use After Free
An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-17045?
CVE-2017-17045 is categorized as a critical vulnerability due to its potential to allow HVM guest OS users to escalate privileges on the host OS.
How do I fix CVE-2017-17045?
To fix CVE-2017-17045, it is recommended to upgrade your Xen version to 4.11.4+107-gef32c7afa2-1 or higher.
What kind of attacks can CVE-2017-17045 enable?
CVE-2017-17045 can enable attacks that lead to privilege escalation, data breach, or denial of service resulting in host OS crashes.
Which versions of Xen are affected by CVE-2017-17045?
CVE-2017-17045 affects Xen versions up to and including 4.9.1.
Are there any workaround strategies for CVE-2017-17045?
Currently, the best mitigation for CVE-2017-17045 is to apply the available updates to Xen in order to close the vulnerability.