Lucene search
PRIOn knowledge basePRION:CVE-2017-7228HistoryApr 04, 2017 - 2:59 p.m.
Input validation
2017-04-0414:59:00
PRIOn knowledge base
www.prio-n.com
9
An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The earlier XSA-29 fix introduced an insufficient check on XENMEM_exchange input, allowing the caller to drive hypervisor memory accesses outside of the guest provided input/output arrays.
References
openwall.com/lists/oss-security/2017/04/04/3
www.debian.org/security/2017/dsa-3847
www.securityfocus.com/bid/97375
www.securitytracker.com/id/1038223
xenbits.xen.org/xsa/advisory-212.html
github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-029-2017.txt
googleprojectzero.blogspot.com/2017/04/pandavirtualization-exploiting-xen.html
www.exploit-db.com/exploits/41870/
Related
nessus
nessus
Xen Hypervisor XENMEM_exchange Memory Disclosure (XSA-212)
2017-04-14 00:00:00
FreeBSD : xen-kernel -- broken check in memory_exchange() permits PV guest breakout (90becf7c-1acf-11e7-970f-002590263bf5)
2017-04-07 00:00:00
RHEL 5 : xsa212_xen (Unpatched Vulnerability)
2024-05-11 00:00:00
cve
cve
CVE-2017-7228
2017-04-04 14:59:00
freebsd
freebsd
xen-kernel -- broken check in memory_exchange() permits PV guest breakout
2017-04-04 00:00:00
debiancve
debiancve
CVE-2017-7228
2017-04-04 14:59:00
zdt
zdt
redhatcve
redhatcve
CVE-2017-7228
2017-04-04 14:27:07
osv
osv
xen - security update
2017-04-21 00:00:00
CVE-2017-7228
2017-04-04 14:59:00
xen - security update
2017-05-09 00:00:00
debian
debian
[SECURITY] [DLA 907-1] xen security update
2017-04-21 21:01:36
[SECURITY] [DSA 3847-1] xen security update
2017-05-09 20:52:42
xen
xen
x86: broken check in memory_exchange() permits PV guest breakout
2017-04-04 12:00:00
openvas
openvas
Debian: Security Advisory (DLA-907-1)
2018-01-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:0983-1)
2021-04-19 00:00:00
Fedora Update for xen FEDORA-2017-054729ab08
2017-04-10 00:00:00
nvd
nvd
CVE-2017-7228
2017-04-04 14:59:00
ubuntucve
ubuntucve
CVE-2017-7228
2017-04-04 00:00:00
cvelist
cvelist
CVE-2017-7228
2017-04-04 14:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: xen-4.7.2-5.fc25
2017-04-09 02:57:00
[SECURITY] Fedora 24 Update: xen-4.6.5-5.fc24
2017-04-14 22:20:07
suse
suse
Security update for xen (important)
2017-04-11 21:08:43
Security update for xen (important)
2017-04-20 15:13:55
Security update for xen (important)
2017-04-19 15:06:52
seebug
seebug