CVE-2017-10917
Publication date 5 July 2017
Last updated 25 August 2025
Ubuntu priority
Description
Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information, aka XSA-221.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| xen | ||
| 16.04 LTS xenial |
Fixed 4.6.5-0ubuntu1.2
|
|
| 14.04 LTS trusty |
Fixed 4.4.2-0ubuntu0.14.04.12
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
9.1 · Critical
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H