CVE-2017-10918

Sažetak

Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222.

Reference

http://www.debian.org/security/2017/dsa-3969
http://www.securityfocus.com/bid/99161
http://www.securitytracker.com/id/1038732
https://security.gentoo.org/glsa/201708-03
https://security.gentoo.org/glsa/201710-17
https://xenbits.xen.org/xsa/advisory-222.html

CVSS

Base:	10.0
Impact:	10.0
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

04-11-2017 - 01:29

Objavljeno

05-07-2017 - 01:29