CVE-2017-10913 Information disclosure in n/a

Critical 9.8 Published 5 Jul 2017 Updated 5 Aug 2024

Concurrent unmap calls in Xen grant-tables leak sensitive info or allow privilege escalation, requiring hypervisor patching.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2017-10913?

CVE-2017-10913 is a critical vulnerability in Xen Xen, published on 5 Jul 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1.

Which versions are affected by CVE-2017-10913?

It affects 1 product.

Products include Xen Xen.

How do I fix CVE-2017-10913?

Apply the vendor's patch.

Is CVE-2017-10913 being exploited?

There is no known exploitation of CVE-2017-10913 in the wild and no public exploit code.

All Xen Xen vulnerabilities

Sources

Also known as ALPINE-CVE-2017-10913, DEBIAN-CVE-2017-10913, GHSA-r6j9-5wqc-p46g, UBUNTU-CVE-2017-10913.