CVE-2017-17564: High severity XEN Xen vulnerability
An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging incorrect error handling for reference counting in shadow mode.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-17564?
CVE-2017-17564 is rated as a high severity vulnerability due to its potential to cause a denial of service and escalate privileges on the host OS.
How do I fix CVE-2017-17564?
To fix CVE-2017-17564, update to a patched version of Xen, specifically versions 4.11.4+107-gef32c7afa2-1, 4.14.6-1, or higher.
What types of systems are affected by CVE-2017-17564?
CVE-2017-17564 affects Xen hypervisor versions up to and including 4.9.1.
What is the exploitation impact of CVE-2017-17564?
Exploitation of CVE-2017-17564 could allow guest OS users to crash the host OS or gain elevated privileges.
Is there a workaround for CVE-2017-17564?
There are no reliable workarounds for CVE-2017-17564; updating to a secure version is the recommended approach.