CVE-2017-7995

Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to…

published May 3, 2017

CVSS
—
EPSS
0%
Percentile
29.2
In the wild
Unconfirmed
What it is

Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00368 · 29.2th percentile
Published
2017-05-03T19:00Z
EPSS history
Timeline
  • 03 MAY 19:00Z
    Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to…
    cvelistv5