Xen Information Disclosure Vulnerability: CVE-2017-17046

by CIRT Team

Description: An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a reboot, because disjoint blocks, and physical addresses that do not start at zero, are mishandled.

Impact: Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.

Mitigation: Updates are available. Please see the references or vendor advisory for more information.

Reference URL’s:

• http://xenbits.xenproject.org/xsa/advisory-245.html
• http://www.securityfocus.com/bid/101067/info
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17046

CIRT Team

Recommended Posts

Enhancing Situational Awareness on Emerging Cyber Threats

09 Sep 2023 - English articles, News, Security Advisories & Alerts, Uncategorized

UPDATE ON SITUATIONAL ALERT

08 Aug 2023 - Articles, News, Security Advisories & Alerts, Uncategorized

SITUATIONAL ALERT ON CYBER THREATS – August 2023

04 Aug 2023 - Security Advisories & Alerts