Xen Privilege Escalation and Denial of Service Vulnerability through Mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) Errors

CVE-2017-17045 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) Physical-to-Machine (P2M) errors.

Learn more about our Physical Security Assessment.