CVE-2017-8904 - Vulnerability Details - OpenCVE

Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer (aka guest transfer) operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214.

No CVSS v4.0

No CVSS v3.1

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Xen	Xen

Configuration 1 [-]

OR	cpe:2.3:o:xen:xen:4.8.0:::::::*
	cpe:2.3:o:xen:xen:4.8.1:::::::*

No data.

References

Link	Providers
http://www.securityfocus.com/bid/98428
http://www.securitytracker.com/id/1038387
http://xenbits.xen.org/xsa/advisory-214.html
https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/
https://nvd.nist.gov/vuln/detail/CVE-2017-8904
https://security.gentoo.org/glsa/201705-11
https://www.cve.org/CVERecord?id=CVE-2017-8904
https://xenbits.xen.org/xsa/advisory-214.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2017-05-11T19:00:00

Updated: 2024-08-05T16:48:22.622Z

Reserved: 2017-05-11T00:00:00

Link: CVE-2017-8904

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2017-05-11T19:29:00.273

Modified: 2025-04-20T01:37:25.860

Link: CVE-2017-8904

Redhat

Severity : Important

Publid Date: 2017-05-02T00:00:00Z

Links: CVE-2017-8904 - Bugzilla

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2017-05-11T00:00:00", "descriptions": [{"lang": "en", "value": "Xen through 4.8.x mishandles the \"contains segment descriptors\" property during GNTTABOP_transfer (aka guest transfer) operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T09:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "GLSA-201705-11", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201705-11"}, {"name": "98428", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/98428"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://xenbits.xen.org/xsa/advisory-214.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/"}, {"name": "1038387", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1038387"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-8904", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Xen through 4.8.x mishandles the \"contains segment descriptors\" property during GNTTABOP_transfer (aka guest transfer) operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "GLSA-201705-11", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201705-11"}, {"name": "98428", "refsource": "BID", "url": "http://www.securityfocus.com/bid/98428"}, {"name": "https://xenbits.xen.org/xsa/advisory-214.html", "refsource": "CONFIRM", "url": "https://xenbits.xen.org/xsa/advisory-214.html"}, {"name": "https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/", "refsource": "CONFIRM", "url": "https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/"}, {"name": "1038387", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1038387"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T16:48:22.622Z"}, "title": "CVE Program Container", "references": [{"name": "GLSA-201705-11", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "https://security.gentoo.org/glsa/201705-11"}, {"name": "98428", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/98428"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://xenbits.xen.org/xsa/advisory-214.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/"}, {"name": "1038387", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1038387"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-8904", "datePublished": "2017-05-11T19:00:00", "dateReserved": "2017-05-11T00:00:00", "dateUpdated": "2024-08-05T16:48:22.622Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:xen:xen:4.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "A4447FA6-EDE7-4915-8238-2EA4CE782E96", "vulnerable": true}, {"criteria": "cpe:2.3:o:xen:xen:4.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "AB6804DA-1A77-47BF-803A-30AC602F8A9B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Xen through 4.8.x mishandles the \"contains segment descriptors\" property during GNTTABOP_transfer (aka guest transfer) operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214."}, {"lang": "es", "value": "Xen hasta la versi\u00f3n 4.8.x manipula incorrectamente la propiedad \"contains segment descriptors\" durante las operaciones GNTTABOP_transfer (tambi\u00e9n conocida como transferencia de hu\u00e9spedes), lo que podr\u00eda permitir a los usuarios del sistema operativo hu\u00e9sped PV ejecutar c\u00f3digo arbitrario en el sistema anfitri\u00f3n, tambi\u00e9n conocido como XSA-214."}], "id": "CVE-2017-8904", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 6.8, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.0, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-05-11T19:29:00.273", "references": [{"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/98428"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id/1038387"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/"}, {"source": "cve@mitre.org", "url": "https://security.gentoo.org/glsa/201705-11"}, {"source": "cve@mitre.org", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "url": "https://xenbits.xen.org/xsa/advisory-214.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/98428"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id/1038387"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.gentoo.org/glsa/201705-11"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "url": "https://xenbits.xen.org/xsa/advisory-214.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}