CVE-2017-17564
libxen-4.9: An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or...
CVE-2017-17564 is fixed in 20 products on 1 platform, first by libxen-4.9 4.9.2-0ubuntu1, released December 12, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0035
28th percentile
An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging incorrect error handling for reference counting in shadow mode.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libxen-4.9 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | libxen-4.9 4.9.2-0ubuntu1 | Dec 12, 2017 |
| libxenstore3.0 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | libxenstore3.0 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-hypervisor-4.6-amd64 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-hypervisor-4.6-amd64 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-hypervisor-4.6-arm64 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-hypervisor-4.6-arm64 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-hypervisor-4.6-armhf · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-hypervisor-4.6-armhf 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-hypervisor-4.7-amd64 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-hypervisor-4.7-amd64 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-hypervisor-4.7-arm64 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-hypervisor-4.7-arm64 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-hypervisor-4.7-armhf · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-hypervisor-4.7-armhf 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-hypervisor-4.8-amd64 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-hypervisor-4.8-amd64 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-hypervisor-4.8-arm64 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-hypervisor-4.8-arm64 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-hypervisor-4.8-armhf · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-hypervisor-4.8-armhf 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-hypervisor-4.9-amd64 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-hypervisor-4.9-amd64 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-hypervisor-4.9-arm64 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-hypervisor-4.9-arm64 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-hypervisor-4.9-armhf · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-hypervisor-4.9-armhf 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-system-amd64 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-system-amd64 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-system-arm64 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-system-arm64 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-system-armhf · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-system-armhf 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-utils-4.9 · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-utils-4.9 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xen-utils-common · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xen-utils-common 4.9.2-0ubuntu1 | Dec 12, 2017 |
| xenstore-utils · Ubuntu 18.04.6 LTS (bionic) | 4.9.2-0ubuntu1 | xenstore-utils 4.9.2-0ubuntu1 | Dec 12, 2017 |