Published: 24/08/2017 Updated: 21/11/2024

Race condition in the grant table code in Xen 4.6.x up to and including 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen 4.6.0
xen xen 4.6.1
xen xen 4.6.3
xen xen 4.6.4
xen xen 4.6.5
xen xen 4.6.6
xen xen 4.7.0
xen xen 4.7.1
xen xen 4.7.2
xen xen 4.7.3
xen xen 4.8.0
xen xen 4.8.1
xen xen 4.9.0
citrix xenserver 6.0.2
citrix xenserver 6.2.0
citrix xenserver 6.5
citrix xenserver 7.0
citrix xenserver 7.1
citrix xenserver 7.2
debian debian linux 8.0
debian debian linux 9.0

Race condition in the grant table code in Xen 46x through 49x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling ...

Description of Problem A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServer 72 The following vulnerabilities have been addres ...

CWE-362 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2017-12136 https://www.first.org/epss http://www.debian.org/security/2017/dsa-3969 http://www.openwall.com/lists/oss-security/2017/08/15/3 http://www.securityfocus.com/bid/100346 http://www.securitytracker.com/id/1039175 http://xenbits.xen.org/xsa/advisory-228.html https://bugzilla.redhat.com/show_bug.cgi?id=1477651 https://security.gentoo.org/glsa/201801-14 https://support.citrix.com/article/CTX225941 http://www.debian.org/security/2017/dsa-3969 http://www.openwall.com/lists/oss-security/2017/08/15/3 http://www.securityfocus.com/bid/100346 http://www.securitytracker.com/id/1039175 http://xenbits.xen.org/xsa/advisory-228.html https://bugzilla.redhat.com/show_bug.cgi?id=1477651 https://security.gentoo.org/glsa/201801-14 https://support.citrix.com/article/CTX225941

CVE-2017-12136

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect