CVE-2017-17046: Infoleak
An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a reboot, because disjoint blocks, and physical addresses that do not start at zero, are mishandled.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-17046?
CVE-2017-17046 is considered to have a high severity due to the potential exposure of sensitive information from the guest OS.
How do I fix CVE-2017-17046?
To fix CVE-2017-17046, upgrade to Xen versions 4.11.4+107-gef32c7afa2-1, 4.14.6-1, 4.14.5+94-ge49571868d-1, 4.17.1+2-gb773c48e36-1, or 4.17.2+55-g0b56bed864-1.
What platforms are affected by CVE-2017-17046?
CVE-2017-17046 specifically affects the ARM platform running Xen through version 4.9.x.
Can guest OS users exploit CVE-2017-17046?
Yes, guest OS users can exploit CVE-2017-17046 to obtain sensitive information from DRAM after a system reboot.
Is there a workaround for CVE-2017-17046?
There are no known workarounds for CVE-2017-17046, and the recommended mitigation is to upgrade to a secure version.