Lucene search

GoogleOSV:CVE-2017-10919

HistoryJul 05, 2017 - 1:29 a.m.

CVE-2017-10919

2017-07-0501:29:00

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.0%

JSON

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-223.

CPENameOperatorVersion
xeneq4.7.1-r4
xeneq4.7.0-r3
xeneq4.8.1-r4
xeneq4.6.3-r2
xeneq4.4.1-r8
xeneq4.0.1-r3
xeneq4.3.0-r3
xeneq4.7.1-r2
xeneq4.7.0-r0
xeneq4.6.3-r5

Name	Operator	Version
xen	eq	4.7.1-r4
xen	eq	4.7.0-r3
xen	eq	4.8.1-r4
xen	eq	4.6.3-r2
xen	eq	4.4.1-r8
xen	eq	4.0.1-r3
xen	eq	4.3.0-r3
xen	eq	4.7.1-r2
xen	eq	4.7.0-r0
xen	eq	4.6.3-r5

Rows per page:

1-10 of 1321

References

www.debian.org/security/2017/dsa-3969

www.securityfocus.com/bid/99159

www.securitytracker.com/id/1038733

security.gentoo.org/glsa/201708-03

xenbits.xen.org/xsa/advisory-223.html