CVE-2017-10918

Critical

Published: 05/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Xen through 4.8.x does not validate memory allocations during certain P2M operations, allowing guest OS users to obtain privileged host OS access, known as XSA-222.

Risk Assessment

This vulnerability may lead to unauthorized access to host resources, posing a significant security risk to the entire virtual infrastructure.

Recommendation

It is recommended to upgrade to the latest version of Xen that includes security patches addressing this vulnerability.

Original NVD description (English source)

Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222.