CVE-2017-7228 Memory corruption in n/a
Insufficient input validation in Xen hypervisor allows guest users to trigger out-of-bounds memory access, potentially leading to code execution or privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-7228?
CVE-2017-7228 is a high-severity memory corruption vulnerability in Xen Xen, published on 4 Apr 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The earlier XSA-29 fix introduced an insufficient check on XENMEM_exchange input, allowing the caller to drive hypervisor memory accesses outside of the guest provided input/output arrays.
Weakness: CWE-129
Which versions are affected by CVE-2017-7228?
It affects 1 product.
Products include Xen Xen.
How do I fix CVE-2017-7228?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-7228 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2017-7228 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Xen Xen
Sources
Also known as ALPINE-CVE-2017-7228, DEBIAN-CVE-2017-7228, DLA-907-1, GHSA-xm77-6vqw-642h, UBUNTU-CVE-2017-7228.