Privilege escalation in Xen - CVE-2017-8905

Vulnerability identifier: #VU6845

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-8905

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to insufficient validation of user-supplied input. A local attacker can use a failsafe callback to modify part of a physical memory page, execute arbitrary code on the host OS with elevated privileges.

Successful exploitation of the vulnerability may result in privilege escalation.

Xen
Gentoo Linux
Fedora
xen (Alpine package)
Gentoo app-emulation/xen
Gentoo app-emulation/xen-pvgrub
Gentoo app-emulation/xen-tools
xen

Install update from vendor's website.

xen (Alpine package) - update to 4.5.5-r2
xen - addressed in versions 4.6.5-6.fc24, 4.7.2-6.fc25, 4.8.1-2.fc26

• http://xenbits.xen.org/xsa/advisory-215.html

• Gentoo update for Xen
• Multiple vulnerabilities in Xen
• Privilege escalation in xen (Alpine package)
• Fedora 25 update for xen
• Fedora 26 update for xen
• Fedora 24 update for xen