Lucene search

K
cvelistMitreCVELIST:CVE-2017-8904
HistoryMay 11, 2017 - 7:00 p.m.

CVE-2017-8904

2017-05-1119:00:00
mitre
www.cve.org

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.2%

Xen through 4.8.x mishandles the “contains segment descriptors” property during GNTTABOP_transfer (aka guest transfer) operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214.

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.2%