CVE-2017-12136

Published Aug 24, 2017

Last updated 21 days ago

Overview

Description
Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling.
Source
cve@mitre.org
NVD status
Deferred

Risk scores

CVSS 3.0

Type
Primary
Base score
7.8
Impact score
6
Exploitability score
1.1
Vector string
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity
HIGH

CVSS 2.0

Type
Primary
Base score
6.9
Impact score
10
Exploitability score
3.4
Vector string
AV:L/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
CWE-362

Social media

Hype score
Not currently trending

Configurations