p PatchFirst

CVE-2017-7995

CVE-2017-7995

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.

CVSS 3.8 · Low · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • xen Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.3.0-1

    Update to 4.3.0-1

  • xen Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.3.0-1

    Update to 4.3.0-1

  • xen Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.3.0-1

    Update to 4.3.0-1

Original sources

Check your server →