CVE-2017-10923CVE-2017-10923

Affected configuration(s):

cpe:/o:xen:xen:4.6.0
cpe:/o:xen:xen:4.6.1
cpe:/o:xen:xen:4.6.2
cpe:/o:xen:xen:4.6.4
cpe:/o:xen:xen:4.6.5
cpe:/o:xen:xen:4.7.1
cpe:/o:xen:xen:4.8.0
cpe:/o:xen:xen:4.8.1

Date published: 2017-07-04T21:29:00.907-04:00

Date last modified: 2017-08-21T21:29:00.987-04:00

CVSS Score: 5.0

Principal attack vector: NETWORK

Complexity:  LOW

Reference URL: http://www.securityfocus.com/bid/99160

Summary: Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-225.

CategoriesUncategorised

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.