CVE-2017-10918

—

CVSS 3.0

10.0 critical

EPSS

4%p89

Published

Jul 5, 2017 (Jul 5, 2017)

Modified

Jun 17, 2026

Description

Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222.

Vendors: xen
Products: xen
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news0 stories

No ingested article mentions this CVE yet.