Published: 24/08/2017 Updated: 03/10/2019

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 8.8 | Impact Score: 6 | Exploitability Score: 2

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen
citrix xenserver 7.0
citrix xenserver 6.5
citrix xenserver 7.1
citrix xenserver 6.2.0
citrix xenserver 7.2
citrix xenserver 6.0.2

Debian Bug report logs - #875881 linux: CVE-2017-1000251 Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: Christoph Anton Mitterer <calestyo@scientianet> Date: Fri, 15 Sep 2017 14:42:01 UTC Severity: critical Tags: confirmed, fixed-upstream, security, ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to privilege escalation, denial of service or information leaks CVE-2017-7518 Andy Lutomirski discovered that KVM is prone to an incorrect debug exception (#DB) error occurring while emulating a syscall instruction A process inside a guest can take advanta ...

Several security issues were fixed in the Linux kernel ...

Several security issues were addressed in the Linux kernel ...

The xen_biovec_phys_mergeable function in drivers/xen/biomergec in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation (CVE-2017-12134) ...

The xen_biovec_phys_mergeable function in drivers/xen/biomergec in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation ...

Description of Problem A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServer 72 The following vulnerabilities have been addres ...

CWE-682 https://support.citrix.com/article/CTX225941 https://bugzilla.redhat.com/show_bug.cgi?id=1477656 http://xenbits.xen.org/xsa/advisory-229.html http://www.securitytracker.com/id/1039176 http://www.securityfocus.com/bid/100343 http://www.openwall.com/lists/oss-security/2017/08/15/4 http://www.debian.org/security/2017/dsa-3981 https://security.gentoo.org/glsa/201801-14 https://usn.ubuntu.com/3655-2/https://usn.ubuntu.com/3655-1/https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=875881 https://usn.ubuntu.com/3444-1/https://www.debian.org/security/./dsa-3981

CVE-2017-12134

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect