CVE-2017-10918

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1500%

EPSS Percentile28.31th

Published2017年7月5日

Last Modified2026年5月13日

Vulnerability Description

Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222.

Affected Platforms (CPE)

💻

Xen

<= 4.8.1

References & Advisories

🔗 http://www.debian.org/security/2017/dsa-3969

🔗 http://www.securityfocus.com/bid/99161

🔗 http://www.securitytracker.com/id/1038732

🔗 https://security.gentoo.org/glsa/201708-03

🔗 https://security.gentoo.org/glsa/201710-17

🔗 https://xenbits.xen.org/xsa/advisory-222.html

🔗 http://www.debian.org/security/2017/dsa-3969

🔗 http://www.securityfocus.com/bid/99161

Vulnerability Description

Affected Platforms (CPE)

Xen

References & Advisories

相关漏洞威胁