CVE-2017-8905

Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the…

mitre·CWE-682·Published 2017-05-11

CVSS

—

EPSS

0.00

KEV

Exploits

cve.orgen

160 chars

Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215.

NVDen

160 chars

Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215.

NVDes

241 chars

Xen hasta la versión 4.6.x para plataformas de 64 bits maneja una llamada de seguridad, lo que podría permitir a los usuarios del sistema operativo huésped PV ejecutar código arbitrario en el sistema anfitrión, también conocido como XSA-215.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	3.1	10.0	AV:L/AC:L/Au:S/C:C/I:C/A:C
3.0	Primary	NVD	8.8	2.0	6.0	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H