CVE-2017-14319

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table entries remain in sync with other accounting done. Although the identity of the page frame was validated correctly, neither the presence of the mapping nor page writability were taken into account.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/100819Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039351Third Party Advisory, VDB Entry
http://xenbits.xen.org/xsa/advisory-234.htmlPatch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
https://support.citrix.com/article/CTX227185
https://www.debian.org/security/2017/dsa-4050
http://www.securityfocus.com/bid/100819Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039351Third Party Advisory, VDB Entry
http://xenbits.xen.org/xsa/advisory-234.htmlPatch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
https://support.citrix.com/article/CTX227185
https://www.debian.org/security/2017/dsa-4050

Timeline

Published: Sep 12, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-143208.0Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files.CVE-2017-143215.4Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attack CVE-2017-143229.8The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remo CVE-2017-143239.8SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive in CVE-2017-143246.5In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to ca CVE-2017-143256.5In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attacker CVE-2017-143266.5In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to ca CVE-2017-143274.4Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files.CVE-2017-143287.5Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot.CVE-2017-143296.7Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell.CVE-2017-14336.5IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages with a corrupt RFH header into the channel which wou CVE-2017-143306.7Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process.