Privilege escalation in Xen - CVE-2017-14319

Vulnerability identifier: #VU8427

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-14319

CWE-ID: CWE-264

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows an adjacent attacker to gain elevated privileges or cause DoS condition on the host system.

The weakness exists due to a flaw in grant unmapping. A local attacker on an x86 PV guest system can gain elevated privileges on the host system or cause the hypervisor to crash.

Xen
Debian Linux
SUSE Linux
Fedora
xen (Alpine package)
xen

Install update from vendor's website.

xen (Alpine package) - addressed in versions 4.6.3-r9, 4.6.3-r11
xen - addressed in versions 4.7.3-5.fc25, 4.8.2-2.fc26, 4.9.0-10.fc27

• http://xenbits.xen.org/xsa/advisory-234.html

• Multiple vulnerabilities in Xen
• SUSE Linux update for xen
• Debian update for xen
• OpenSUSE Linux update for xen
• OpenSUSE Linux update for xen
• SUSE Linux update for xen
• SUSE Linux update for xen
• Privilege escalation in xen (Alpine package)
• Fedora 27 update for xen
• Fedora 26 update for xen
• Fedora 25 update for xen