CVE-2017-17563: Buffer Overflow
An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging an incorrect mask for reference-count overflow checking in shadow mode.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-17563?
CVE-2017-17563 has a medium severity level due to its potential for denial of service and privilege escalation.
How do I fix CVE-2017-17563?
To fix CVE-2017-17563, users should upgrade to a fixed version of Xen, specifically those versions higher than 4.9.1.
What are the potential impacts of CVE-2017-17563?
The potential impacts of CVE-2017-17563 include denial of service resulting in host OS crashes and the ability for guest OS users to gain host OS privileges.
Which versions of Xen are affected by CVE-2017-17563?
Xen versions 4.9.x and lower are affected by CVE-2017-17563.
Can CVE-2017-17563 be exploited remotely?
CVE-2017-17563 is primarily a local exploit, meaning it requires access to the guest OS to exploit the vulnerability.