Information disclosure in Xen - CVE-2017-15589
Published: October 16, 2017 / Updated: July 28, 2020
Vulnerability identifier: #VU8830
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-15589
CWE-ID: CWE-200
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an adjacent attacker to obtain potentially sensitive information.
The weakness exists in the I/O intercept code on x86 HVM systems due to improper security restrictions during I/O operations. During I/O operations, a write path where data is stored in an internal structure could contain bits from an uninitialized Hypervisor stack slot that allows adjacent attacker to access arbitrary data.
Successful exploitation of the vulnerability may result in further attack.
The weakness exists in the I/O intercept code on x86 HVM systems due to improper security restrictions during I/O operations. During I/O operations, a write path where data is stored in an internal structure could contain bits from an uninitialized Hypervisor stack slot that allows adjacent attacker to access arbitrary data.
Successful exploitation of the vulnerability may result in further attack.
Affected software
Xen
Gentoo Linux
Fedora
xen
Gentoo Linux
Fedora
xen
How to mitigate CVE-2017-15589
Install update from vendor's website.
xen - addressed in versions 4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27