1. Home
  2. CVE Database
  3. CVE-2017-15597
CRITICAL · 9.1

CVE-2017-15597

An issue was discovered in Xen through 4.9.x. Grant copying code made an implication that any grant pin would be accompanied by a suitable page reference. Other portions of code, however, did not matc...

Vulnerability Description

An issue was discovered in Xen through 4.9.x. Grant copying code made an implication that any grant pin would be accompanied by a suitable page reference. Other portions of code, however, did not match up with that assumption. When such a grant copy operation is being done on a grant of a dying domain, the assumption turns out wrong. A malicious guest administrator can cause hypervisor memory corruption, most likely resulting in host crash and a Denial of Service. Privilege escalation and information leaks cannot be ruled out.

CVSS Score

9.1

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
XenXen<= 4.9.0

Related Weaknesses (CWE)

CWE-119CWE-200

References

FAQ

What is CVE-2017-15597?

CVE-2017-15597 is a vulnerability with a CVSS score of 9.1 (CRITICAL). An issue was discovered in Xen through 4.9.x. Grant copying code made an implication that any grant pin would be accompanied by a suitable page reference. Other portions of code, however, did not matc...

How severe is CVE-2017-15597?

CVE-2017-15597 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2017-15597?

Check the references section above for vendor advisories and patch information. Affected products include: Xen Xen.