Privilege escalation in Xen - CVE-2017-17045

Vulnerability identifier: #VU9435

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-17045

CWE-ID: CWE-264

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows an adjacent attacker to gain elevated privileges on the target system.

The weakness exists due to improper privileges control. An adjacent attacker can trigger a p2m error checking flaw in the Populate on Demand (PoD) code and gain write access to freed memory and gain elevated privileges on the host system.

Xen
Gentoo Linux
Fedora
Oracle VM Server for x86
xen (Alpine package)
xen

Install update from vendor's website.

xen (Alpine package) - update to 4.7.3-r2
xen - addressed in versions 4.8.2-8.fc26, 4.8.2-9.fc26, 4.9.1-2.fc27

• http://xenbits.xen.org/xsa/advisory-247.html

• Multiple vulnerabilities in Xen
• Privilege escalation in xen (Alpine package)
• Gentoo update for Xen
• Multiple vulnerabilities in Oracle VM Server
• Fedora 27 update for xen
• Fedora 26 update for xen
• Fedora 26 update for xen