CVE-2017-10913

Critical

Published: 05/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, allowing backend attackers to obtain sensitive information or gain privileges.

Risk Assessment

Attackers may exploit this vulnerability to gain access to confidential data or escalate privileges, posing a serious threat to system security.

Recommendation

It is recommended to upgrade to the latest version of Xen to mitigate this vulnerability and to monitor the system for potential attack attempts.

Original NVD description (English source)

The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1.