Vulnerability Description
The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS users to defeat ASLR and other protection mechanisms, aka XSA-220.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Xen | Xen | 4.5.0 |
Related Weaknesses (CWE)
References
- http://www.debian.org/security/2017/dsa-3969
- http://www.securityfocus.com/bid/99167
- http://www.securitytracker.com/id/1038730
- https://security.gentoo.org/glsa/201708-03
- https://xenbits.xen.org/xsa/advisory-220.htmlMailing ListMitigationVendor Advisory
- http://www.debian.org/security/2017/dsa-3969
- http://www.securityfocus.com/bid/99167
- http://www.securitytracker.com/id/1038730
- https://security.gentoo.org/glsa/201708-03
- https://xenbits.xen.org/xsa/advisory-220.htmlMailing ListMitigationVendor Advisory
FAQ
What is CVE-2017-10916?
CVE-2017-10916 is a vulnerability with a CVSS score of 7.5 (HIGH). The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS users...
How severe is CVE-2017-10916?
CVE-2017-10916 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-10916?
Check the references section above for vendor advisories and patch information. Affected products include: Xen Xen.