SB2017112904 - Multiple vulnerabilities in Xen

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Privilege escalation (CVE-ID: CVE-2017-17045)

The vulnerability allows an adjacent attacker to gain elevated privileges on the target system.

The weakness exists due to improper privileges control. An adjacent attacker can trigger a p2m error checking flaw in the Populate on Demand (PoD) code and gain write access to freed memory and gain elevated privileges on the host system.

2) Infinite loop (CVE-ID: CVE-2017-17044)

The vulnerability allows an adjacent attacker to cause DoS condition on the target system.

The weakness exists due to an infinite loop. An adjacent attacker can trigger an error handling flaw in the processing of errors from the Populate on Demand (PoD) code and cause the service to crash.

Remediation

Install update from vendor's website.

References

• http://xenbits.xen.org/xsa/advisory-247.html
• http://xenbits.xen.org/xsa/advisory-246.html