Out-of-bounds write in Xen - CVE-2017-14316

Vulnerability identifier: #VU8424

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-14316

CWE-ID: CWE-787

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows an adjacent attacker to execute arbitrary code on the host system.

The weakness exists due to out-of-bounds array access in the processing of NUMA node parameters. An adjacent attacker can invoke specially crafted hypercalls and execute arbitrary code with elevated privileges.

Xen
Debian Linux
SUSE Linux
Fedora
xen (Alpine package)
xen

Install update from vendor's website.

xen (Alpine package) - addressed in versions 4.6.3-r9, 4.6.3-r11
xen - addressed in versions 4.7.3-5.fc25, 4.8.2-2.fc26, 4.9.0-10.fc27

• http://xenbits.xen.org/xsa/advisory-231.html

• Multiple vulnerabilities in Xen
• SUSE Linux update for xen
• Debian update for xen
• OpenSUSE Linux update for xen
• OpenSUSE Linux update for xen
• SUSE Linux update for xen
• SUSE Linux update for xen
• Out-of-bounds write in xen (Alpine package)
• Fedora 27 update for xen
• Fedora 26 update for xen
• Fedora 25 update for xen