Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-10917
HistoryJul 05, 2017 - 1:29 a.m.

Null pointer dereference

2017-07-0501:29:00
PRIOn knowledge base
www.prio-n.com
11

9.1 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.7%

Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information, aka XSA-221.

CPENameOperatorVersion
xenle4.8.1

9.1 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.7%