← Back

CVE-2017-14431

nvd nist
Published: Sep 13, 2017Modified: May 13, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.

Affected (51)

Products: Xen: Xen
Xen
1 product
Xen
Configuration A
51 vulnerable
Vulnerable SoftwareAffected Versions
Xen
Xen
Version 3.3.0
Xen
Version 3.3.1
Xen
Version 3.3.2
Xen
Version 3.4.0
Xen
Version 3.4.1
Xen
Version 3.4.2
Xen
Version 3.4.3
Xen
Version 3.4.4
Xen
Version 4.0.0
Xen
Version 4.0.1
Xen
Version 4.0.2
Xen
Version 4.0.3
Xen
Version 4.0.4
Xen
Version 4.1.0
Xen
Version 4.1.1
Xen
Version 4.1.2
Xen
Version 4.1.3
Xen
Version 4.1.4
Xen
Version 4.1.5
Xen
Version 4.1.6.1
Xen
Version 4.1.6
Xen
Version 4.2.0
Xen
Version 4.2.1
Xen
Version 4.2.2
Xen
Version 4.2.3
Xen
Version 4.2.4
Xen
Version 4.2.5
Xen
Version 4.3.0
Xen
Version 4.3.1
Xen
Version 4.3.2
Xen
Version 4.3.3
Xen
Version 4.3.4
Xen
Version 4.4.0
Xen
Version 4.4.0 rc1
Xen
Version 4.4.1
Xen
Version 4.4.2
Xen
Version 4.4.3
Xen
Version 4.4.4
Xen
Version 4.5.0
Xen
Version 4.5.1
Xen
Version 4.5.2
Xen
Version 4.5.3
Xen
Version 4.5.5
Xen
Version 4.6.0
Xen
Version 4.6.1
Xen
Version 4.6.2
Xen
Version 4.6.4
Xen
Version 4.6.5
Xen
Version 4.7.1
Xen
Version 4.8.0
Xen
Version 4.8.1

Related CWEs

CWE-772
Missing Release of Resource after Effective Lifetime
The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

References (4)

Source: cve@mitre.org
Source: cve@mitre.org
MitigationPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationPatchVendor Advisory

Timeline

No history available yet.