Skip to content
OpenAdvisories
Unscored Public exploit CVE-2017-15595 EUVD-2017-7047GHSA-m9p9-mh4f-qxmq

An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consum…

Published Oct 18, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Package: xen Package: xen Package: xen Ecosystem: Alpine Ecosystem: Debian Ecosystem: Ubuntu

Description

An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and hypervisor crash) or possibly gain privileges via crafted page-table stacking.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 xen 4.8.2+xsa245-0+deb9u1 —
Debian 13 xen 4.8.2+xsa245-0+deb9u1 —
Debian 12 xen 4.8.2+xsa245-0+deb9u1 —
Debian 9 xen 4.8.2+xsa245-0+deb9u1 DSA-4050-1
Debian 8 xen 4.4.4lts3-0+deb8u1 DLA-1559-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Debian 7 xen 4.1.6.lts1-10 DLA-1181-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS xen 4.9.2-0ubuntu1 —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP3 xen 4.9.1_08-3.26.1 SUSE-SU-2018:0438-1
SLES 12 SP2 xen 4.7.3_06-43.15.1 SUSE-SU-2018:0472-1, SUSE-SU-2017:2864-1
SLES 12 SP1 xen 4.5.5_18-22.31.1 SUSE-SU-2018:0609-1, SUSE-SU-2017:3236-1, SUSE-SU-2017:2873-1
SLES 12 xen 4.4.4_24-22.54.1 SUSE-SU-2018:0601-1, SUSE-SU-2017:3239-1, SUSE-SU-2017:2856-1
SLES 11 SP4 xen 4.4.4_24-61.12.1 SUSE-SU-2018:0638-1, SUSE-SU-2017:3242-1, SUSE-SU-2017:2815-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 11 SP3 xen 4.2.5_21-45.11.1 SUSE-SU-2018:0678-1, SUSE-SU-2017:3212-1, SUSE-SU-2017:2812-1
SLES for SAP 12 SP3 xen 4.9.1_08-3.26.1 SUSE-SU-2018:0438-1
SLES for SAP 12 SP2 xen 4.7.3_06-43.15.1 SUSE-SU-2018:0472-1, SUSE-SU-2017:2864-1
SLES for SAP 12 SP1 xen 4.5.5_18-22.31.1 SUSE-SU-2018:0609-1, SUSE-SU-2017:3236-1, SUSE-SU-2017:2873-1
SLES for SAP 11 SP4 xen 4.4.4_24-61.12.1 SUSE-SU-2018:0638-1, SUSE-SU-2017:3242-1, SUSE-SU-2017:2815-1
SUSE OpenStack Cloud 6 xen 4.5.5_18-22.31.1 SUSE-SU-2018:0609-1, SUSE-SU-2017:3236-1, SUSE-SU-2017:2873-1
SUSE Linux Enterprise Point of Sale 11 SP3 xen 4.2.5_21-45.11.1 SUSE-SU-2018:0678-1, SUSE-SU-2017:3212-1, SUSE-SU-2017:2812-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 xen 4.9.0-r6 —
Alpine v3.23 xen 4.9.0-r6 —
Alpine v3.22 xen 4.9.0-r6 —
Alpine v3.21 xen 4.9.0-r6 —
Alpine v3.20 xen 4.9.0-r6 —
Show 16 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 xen 4.9.0-r6 —
Alpine v3.18 xen 4.9.0-r6 —
Alpine v3.17 xen 4.9.0-r6 —
Alpine v3.16 xen 4.9.0-r6 —
Alpine v3.15 xen 4.9.0-r6 —
Alpine v3.14 xen 4.9.0-r6 —
Alpine v3.13 xen 4.9.0-r6 —
Alpine v3.12 xen 4.9.0-r6 —
Alpine v3.11 xen 4.9.0-r6 —
Alpine v3.10 xen 4.9.0-r6 —
Alpine v3.9 xen 4.9.0-r6 —
Alpine v3.8 xen 4.9.0-r6 —
Alpine v3.7 xen 4.9.0-r6 —
Alpine v3.6 xen 4.8.2-r3 —
Alpine v3.5 xen 4.7.3-r3 —
Alpine v3.4 xen 4.6.6-r2 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Exploit-DB 1

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 18

References