CVE-2017-17566: High severity XEN Xen vulnerability
An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) or gain host OS privileges in shadow mode by mapping a certain auxiliary page.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-17566?
CVE-2017-17566 is classified as a critical vulnerability due to its potential to allow denial of service or privilege escalation.
How do I fix CVE-2017-17566?
To fix CVE-2017-17566, update to a Xen version that is 4.11.4+107-gef32c7afa2-1 or higher, or any patched version post-4.9.x.
What impact does CVE-2017-17566 have on the host OS?
CVE-2017-17566 can lead to a crash of the host OS or allow unauthorized privilege escalations for PV guest OS users.
Which Xen versions are affected by CVE-2017-17566?
Xen versions up to 4.9.x, including all versions prior to 4.11.4 and certain other versions, are affected by CVE-2017-17566.
Is there a known exploit for CVE-2017-17566?
Yes, CVE-2017-17566 has been documented with potential exploit patterns that leverage the vulnerability to compromise the host OS.