CVE-2017-10923

CVE-2017-10923 affects the Xen hypervisor (Xen 4.8.x and earlier). The root cause is a missing validation of the vCPU array index when an SGI is sent, which can allow a guest OS user to trigger a denial of service resulting in a hypervisor crash (XSA-225). The connected documents describe this as...

CVE-2017-10923

Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-225...