CVE-2017-17045

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/102013Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/102129Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039879Third Party Advisory, VDB Entry
https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html
https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html
https://security.gentoo.org/glsa/201801-14
https://support.citrix.com/article/CTX230138Issue Tracking, Third Party Advisory
https://xenbits.xen.org/xsa/advisory-247.htmlIssue Tracking, Mitigation, Patch, Vendor Advisory
http://www.securityfocus.com/bid/102013Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/102129Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039879Third Party Advisory, VDB Entry
https://lists.debian.org/debian-lts-announce/2018/01/msg00003.html
https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html
https://security.gentoo.org/glsa/201801-14
https://support.citrix.com/article/CTX230138Issue Tracking, Third Party Advisory
https://xenbits.xen.org/xsa/advisory-247.htmlIssue Tracking, Mitigation, Patch, Vendor Advisory

Timeline

Published: Nov 28, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-170466.5An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a r CVE-2017-170497.8TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified CVE-2017-17054.3IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. While this information is not vis CVE-2017-170507.8TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified CVE-2017-170518.6An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an au CVE-2017-170527.8The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new process's mm_struct, CVE-2017-170537.0The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correctly handle errors from CVE-2017-170545.5In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when pla CVE-2017-170559.0Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) att CVE-2017-170568.8The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a 'password_change()' f CVE-2017-170576.1There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280. The vulnerability exists due to insufficient filtration of user-supplied d CVE-2017-170587.5The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/ema