CVE-2017-17565: Input Validation
An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) if shadow mode and log-dirty mode are in place, because of an incorrect assertion related to M2P.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-17565?
CVE-2017-17565 has a severity rating of medium due to its potential to cause denial of service affecting the host OS.
How do I fix CVE-2017-17565?
To fix CVE-2017-17565, upgrade to Xen versions 4.11.4+107-gef32c7afa2-1, 4.14.6-1, 4.14.5+94-ge49571868d-1, 4.17.1+2-gb773c48e36-1, or 4.17.2+55-g0b56bed864-1.
What causes CVE-2017-17565 vulnerability?
CVE-2017-17565 is caused by an incorrect assertion related to M2P when shadow mode and log-dirty mode are enabled in Xen.
Which versions of Xen are affected by CVE-2017-17565?
Xen versions up to and including 4.9.x are affected by CVE-2017-17565, particularly those with shadow mode and log-dirty mode enabled.
What is the impact of CVE-2017-17565?
The impact of CVE-2017-17565 is a denial of service where a PV guest OS can lead to a crash of the host operating system.