#VU9442 Infinite loop in Xen - CVE-2017-17044

Vulnerability identifier: #VU9442

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2017-17044

CWE-ID: CWE-835

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

Vulnerable software:
Xen

Software vendor:
Xen Project

The vulnerability allows an adjacent attacker to cause DoS condition on the target system.

The weakness exists due to an infinite loop. An adjacent attacker can trigger an error handling flaw in the processing of errors from the Populate on Demand (PoD) code and cause the service to crash.

Install update from vendor's website.

• http://xenbits.xen.org/xsa/advisory-246.html