CVE-2017-17046

Published: Nov 28, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Exploitability: 2.0 / Impact: 4.0

Source: NVD

Description

An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a reboot, because disjoint blocks, and physical addresses that do not start at zero, are mishandled.

Affected (1)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Up to 4.9.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html

Source: cve@mitre.org

https://security.gentoo.org/glsa/201801-14

Source: cve@mitre.org

https://xenbits.xen.org/xsa/advisory-245.html

Source: cve@mitre.org

Issue TrackingPatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201801-14

Source: af854a3a-2127-422b-91ae-364da2661108

https://xenbits.xen.org/xsa/advisory-245.html

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchVendor Advisory

Timeline

No history available yet.