CVE-2019-17347

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incompatible with Linux (and possibly other guest kernels).

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2019/10/25/8Mailing List
http://xenbits.xen.org/xsa/advisory-293.htmlPatch, Vendor Advisory
https://seclists.org/bugtraq/2020/Jan/21Mailing List, Third Party Advisory
https://www.debian.org/security/2020/dsa-4602Third Party Advisory
https://xenbits.xen.org/xsa/advisory-293.htmlVendor Advisory
http://www.openwall.com/lists/oss-security/2019/10/25/8Mailing List
http://xenbits.xen.org/xsa/advisory-293.htmlPatch, Vendor Advisory
https://seclists.org/bugtraq/2020/Jan/21Mailing List, Third Party Advisory
https://www.debian.org/security/2020/dsa-4602Third Party Advisory
https://xenbits.xen.org/xsa/advisory-293.htmlVendor Advisory

Timeline

Published: Oct 8, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-173486.5An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service because of an incompatibility betw CVE-2019-173495.5An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a LoadExcl CVE-2019-17357.8A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated CVE-2019-173505.5An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a compare-a CVE-2019-173516.5An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to CVE-2019-173527.5In JFinal cos before 2019-08-13, as used in JFinal 4.4, there is a vulnerability that can bypass the isSafeFile() function: one can upload a CVE-2019-173538.2An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly without authentication CVE-2019-173549.4wan.htm page on Zyxel NBG-418N v2 with firmware version V1.00(AARP.9)C0 can be accessed directly without authentication, which can lead to d CVE-2019-173559.8In the Orbitz application 19.31.1 for Android, the username and password are stored in the log during authentication, and may be available t CVE-2019-173566.5The Infinite Design application 3.4.12 for Android sends a username and password via TCP without any encryption during login, as demonstrate CVE-2019-173576.5Cacti through 1.2.7 is affected by a graphs.php?template_id= SQL injection vulnerability affecting how template identifiers are handled when CVE-2019-173588.1Cacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization of user-controlled data to populate arrays