Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-14317
HistorySep 12, 2017 - 12:00 a.m.

CVE-2017-14317

2017-09-1200:00:00
ubuntu.com
ubuntu.com
9

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

25.6%

A domain cleanup issue was discovered in the C xenstore daemon (aka
cxenstored) in Xen through 4.9.x. When shutting down a VM with a
stubdomain, a race in cxenstored may cause a double-free. The xenstored
daemon may crash, resulting in a DoS of any parts of the system relying on
it (including domain creation / destruction, ballooning, device changes,
etc.).

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchxen< 4.4.2-0ubuntu0.14.04.14UNKNOWN
ubuntu16.04noarchxen< 4.6.5-0ubuntu1.4UNKNOWN
ubuntu17.04noarchxen< 4.8.0-1ubuntu2.4UNKNOWN

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

25.6%