Every CVE Search/ Get API key

CVE-2017-12855

Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in...

6.5 MediumFix available

Xen maintains the GTF{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.40%Down 0.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.5

Xen maintains the GTF{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected.

Record
CVE-2017-12855
CVSS 3.0
6.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

Xen maintains the GTF{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected.

Record
CVE-2017-12855
Updated
2026-11-02
EUVDEUVD-2017-4390 No score

Xen maintains the GTF{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected.

Record
EUVD-2017-4390
Updated
2026-11-03
GitHub AdvisoriesGHSA-c6pm-8crm-3rr8 6.5

Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in...

Xen maintains the GTF{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected.

Record
GHSA-c6pm-8crm-3rr8
CVSS 3.0
6.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
OSVALPINE-CVE-2017-12855 6.5

Xen maintains the GTF{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected.

Record
ALPINE-CVE-2017-12855
CVSS 3.0
6.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSV 6.5

Xen maintains the GTF{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected.

Record
CVE-2017-12855
CVSS 3.0
6.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2017-12855 6.5

Xen maintains the GTF{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected.

Record
DEBIAN-CVE-2017-12855
CVSS 3.0
6.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2017-12855 6.5

Xen maintains the GTF{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected.

Record
UBUNTU-CVE-2017-12855
CVSS 3.0
6.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVSUSE-SU-2017:2326-1 No score

Security update for xen

This update for xen to version 4.7.3 fixes several issues.

These security issues were fixed:

  • CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information (XSA-226, bsc#1051787).
  • CVE-2017-12137: Incorrectly-aligned updates to pagetables allowed for privilege escalation (XSA-227, bsc#1051788).
  • CVE-2017-12136: Race conditions with maptrack free list handling allows a malicious guest administrator to crash the host or escalate their privilege to that of the host (XSA-228, bsc#1051789).
  • CVE-2017-11434: The dhcp_decode function in slirp/bootp.c allowed local guest OS users to cause a denial of service (out-of-bounds read) via a crafted DHCP options string (bsc#1049578).
  • CVE-2017-10664: qemu-nbd did not ignore SIGPIPE, which allowed remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt (bsc#1046637).
  • CVE-2017-12855: Premature clearing of GTF_writing / GTF_reading lead to potentially leaking sensitive information (XSA-230 CVE-2017-12855).

These non-security issues were fixed:

  • bsc#1055695: XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack
  • bsc#1035231: Migration of HVM domU did not use superpages on destination dom0
  • bsc#1002573: Optimized LVM functions in block-dmmd block-dmmd
  • bsc#1037840: Xen-detect always showed HVM for PV guests
Record
SUSE-SU-2017:2326-1
Updated
2026-11-02
OSVSUSE-SU-2017:2327-1 No score

Security update for xen

This update for xen fixes several issues.

These security issues were fixed:

  • CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information (XSA-226, bsc#1051787).
  • CVE-2017-12137: Incorrectly-aligned updates to pagetables allowed for privilege escalation (XSA-227, bsc#1051788).
  • CVE-2017-12136: Race conditions with maptrack free list handling allows a malicious guest administrator to crash the host or escalate their privilege to that of the host (XSA-228, bsc#1051789).
  • CVE-2017-11434: The dhcp_decode function in slirp/bootp.c allowed local guest OS users to cause a denial of service (out-of-bounds read) via a crafted DHCP options string (bsc#1049578).
  • CVE-2017-10664: qemu-nbd did not ignore SIGPIPE, which allowed remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt (bsc#1046637).
  • CVE-2017-12855: Premature clearing of GTF_writing / GTF_reading lead to potentially leaking sensitive information (XSA-230 bsc#1052686.

These non-security issues were fixed:

  • bsc#1055695: XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack
  • bsc#1035231: Migration of HVM domU did not use superpages on destination dom0
  • bsc#1002573: Optimized LVM functions in block-dmmd block-dmmd
Record
SUSE-SU-2017:2327-1
Updated
2026-11-02
OSVSUSE-SU-2017:2327-2 No score

Security update for xen

This update for xen fixes several issues.

These security issues were fixed:

  • CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information (XSA-226, bsc#1051787).
  • CVE-2017-12137: Incorrectly-aligned updates to pagetables allowed for privilege escalation (XSA-227, bsc#1051788).
  • CVE-2017-12136: Race conditions with maptrack free list handling allows a malicious guest administrator to crash the host or escalate their privilege to that of the host (XSA-228, bsc#1051789).
  • CVE-2017-11434: The dhcp_decode function in slirp/bootp.c allowed local guest OS users to cause a denial of service (out-of-bounds read) via a crafted DHCP options string (bsc#1049578).
  • CVE-2017-10664: qemu-nbd did not ignore SIGPIPE, which allowed remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt (bsc#1046637).
  • CVE-2017-12855: Premature clearing of GTF_writing / GTF_reading lead to potentially leaking sensitive information (XSA-230 bsc#1052686.

These non-security issues were fixed:

  • bsc#1055695: XEN: 11SP4 and 12SP3 HVM guests can not be restored after the save using xl stack
  • bsc#1035231: Migration of HVM domU did not use superpages on destination dom0
  • bsc#1002573: Optimized LVM functions in block-dmmd block-dmmd
Record
SUSE-SU-2017:2327-2
Updated
2026-11-02
OSVSUSE-SU-2017:2339-1 No score

Security update for xen

This update for xen fixes the following issues:

  • CVE-2017-12855: Premature clearing of GTF_writing / GTF_reading lead to potentially leaking sensitive information (XSA-230, bsc#1052686).
  • CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information (XSA-226, bsc#1051787).
  • CVE-2017-12137: Incorrectly-aligned updates to pagetables allowed for privilege escalation (XSA-227, bsc#1051788).
  • CVE-2017-11334: The address_space_write_continue function in exec.c allowed local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area (bsc#1048920).
  • CVE-2017-11434: The dhcp_decode function in slirp/bootp.c allowed local guest OS users to cause a denial of service (out-of-bounds read) via a crafted DHCP options string (bsc#1049578).
  • CVE-2017-10664: qemu-nbd did not ignore SIGPIPE, which allowed remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt (bsc#1046637).
Record
SUSE-SU-2017:2339-1
Updated
2026-11-02
OSVSUSE-SU-2017:2450-1 No score

Security update for xen

This update for xen fixes several issues.

These security issues were fixed:

  • CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information (XSA-226, bsc#1051787).
  • CVE-2017-12137: Incorrectly-aligned updates to pagetables allowed for privilege escalation (XSA-227, bsc#1051788).
  • CVE-2017-11334: The address_space_write_continue function in exec.c allowed local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area (bsc#1048920).
  • CVE-2017-11434: The dhcp_decode function in slirp/bootp.c allowed local guest OS users to cause a denial of service (out-of-bounds read) via a crafted DHCP options string (bsc#1049578).
  • CVE-2017-10806: Stack-based buffer overflow in hw/usb/redirect.c allowed local guest OS users to cause a denial of service via vectors related to logging debug messages (bsc#1047675).
  • CVE-2017-10664: qemu-nbd did not ignore SIGPIPE, which allowed remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt (bsc#1046637).
  • CVE-2017-12855: Premature clearing of GTF_writing / GTF_reading lead to potentially leaking sensitive information (XSA-230, bsc#1052686).
  • CVE-2017-14316: Missing bound check in function alloc_heap_pages for an internal array allowed attackers using crafted hypercalls to execute arbitrary code within Xen (XSA-231, bsc#1056278)
  • CVE-2017-14317: A race in cxenstored may have cause a double-free allowind for DoS of the xenstored daemon (XSA-233, bsc#1056281).
  • CVE-2017-14319: An error while handling grant mappings allowed malicious or buggy x86 PV guest to escalate its privileges or crash the hypervisor (XSA-234, bsc#1056282).

This non-security issue was fixed:

  • bsc#1032598: Prevent removal of NVME devices
  • bsc#1037413: Support for newer intel cpu's, mwait-idle driver and skylake
Record
SUSE-SU-2017:2450-1
Updated
2026-11-02
OSVSUSE-SU-2017:2541-1 No score

Security update for xen

This update for xen fixes several issues.

These security issues were fixed:

  • CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information (XSA-226, bsc#1051787).
  • CVE-2017-12137: Incorrectly-aligned updates to pagetables allowed for privilege escalation (XSA-227, bsc#1051788).
  • CVE-2017-11334: The address_space_write_continue function in exec.c allowed local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area (bsc#1048920).
  • CVE-2017-11434: The dhcp_decode function in slirp/bootp.c allowed local guest OS users to cause a denial of service (out-of-bounds read) via a crafted DHCP options string (bsc#1049578).
  • CVE-2017-10806: Stack-based buffer overflow in hw/usb/redirect.c allowed local guest OS users to cause a denial of service via vectors related to logging debug messages (bsc#1047675).
  • CVE-2017-10664: qemu-nbd did not ignore SIGPIPE, which allowed remote attackers to cause a denial of service (daemon crash) by disconnecting during a server-to-client reply attempt (bsc#1046637).
  • CVE-2017-12855: Premature clearing of GTF_writing / GTF_reading lead to potentially leaking sensitive information (XSA-230, bsc#1052686).
  • CVE-2017-14316: Missing bound check in function alloc_heap_pages for an internal array allowed attackers using crafted hypercalls to execute arbitrary code within Xen (XSA-231, bsc#1056278)
  • CVE-2017-14317: A race in cxenstored may have cause a double-free allowind for DoS of the xenstored daemon (XSA-233, bsc#1056281).
  • CVE-2017-14319: An error while handling grant mappings allowed malicious or buggy x86 PV guest to escalate its privileges or crash the hypervisor (XSA-234, bsc#1056282).

These non-security issues were fixed:

  • bsc#1002573: Optimized LVM functions in block-dmmd block-dmmd
  • bsc#1032598: Prevent removal of NVME devices
  • bsc#1037413: Support for newer intel cpu's, mwait-idle driver and skylake
Record
SUSE-SU-2017:2541-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xen
Alpine:v3.10
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.11
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.12
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.13
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.14
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.15
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.16
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.17
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.18
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.19
 before 4.9.0-r1
4.9.0-r1
Show 35 moreShow less
Affected packages
PackageAffectedFixed
xen
Alpine:v3.20
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.21
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.22
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.23
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.24
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.3
 before 4.6.6-r0
4.6.6-r0
xen
Alpine:v3.4
 before 4.6.6-r0
4.6.6-r0
xen
Alpine:v3.5
 before 4.7.3-r0
4.7.3-r0
xen
Alpine:v3.6
 before 4.8.2-r0
4.8.2-r0
xen
Alpine:v3.7
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.8
 before 4.9.0-r1
4.9.0-r1
xen
Alpine:v3.9
 before 4.9.0-r1
4.9.0-r1
xen
Debian:12
 before 4.8.1-1+deb9u3
4.8.1-1+deb9u3
xen
Debian:13
 before 4.8.1-1+deb9u3
4.8.1-1+deb9u3
xen
Debian:14
 before 4.8.1-1+deb9u3
4.8.1-1+deb9u3
xen
Debian:7
From an advisory covering 15 CVEs
 before 4.1.6.lts1-9, plus listed versions
4.1.4-34.1.4-3+deb7u14.1.4-3+deb7u24.1.4-3+deb7u34.1.4-3+deb7u4
Show 15 moreShow less
4.1.4-3+deb7u54.1.4-3+deb7u64.1.4-3+deb7u74.1.4-3+deb7u84.1.4-3+deb7u94.1.4-44.1.6.1-1+deb7u14.1.6.lts1-14.1.6.lts1-24.1.6.lts1-34.1.6.lts1-44.1.6.lts1-54.1.6.lts1-64.1.6.lts1-74.1.6.lts1-8
4.1.6.lts1-9
xen
Debian:8
From an advisory covering 13 CVEs
 before 4.4.1-9+deb8u10, plus listed versions
4.4.1-94.4.1-9+deb8u14.4.1-9+deb8u24.4.1-9+deb8u34.4.1-9+deb8u4
Show 5 moreShow less
4.4.1-9+deb8u54.4.1-9+deb8u64.4.1-9+deb8u74.4.1-9+deb8u84.4.1-9+deb8u9
4.4.1-9+deb8u10
xen
Debian:9
From an advisory covering 13 CVEs
 before 4.8.1-1+deb9u3, plus listed versions
4.8.1-1+deb9u14.8.1-1+deb9u2
4.8.1-1+deb9u3
xen
SUSE:Linux Enterprise Desktop 12 SP2
From an advisory covering 7 CVEs
 before 4.7.3_03-43.9.1
4.7.3_03-43.9.1
xen
SUSE:Linux Enterprise Software Development Kit 12 SP2
From an advisory covering 7 CVEs
 before 4.7.3_03-43.9.1
4.7.3_03-43.9.1
xen
SUSE:Linux Enterprise Server 12 SP2
From an advisory covering 7 CVEs
 before 4.7.3_03-43.9.1
4.7.3_03-43.9.1
xen
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 7 CVEs
 before 4.7.3_03-43.9.1
4.7.3_03-43.9.1
xen
SUSE:Linux Enterprise Desktop 12 SP3
From an advisory covering 6 CVEs
 before 4.9.0_11-3.9.1
4.9.0_11-3.9.1
xen
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 6 CVEs
 before 4.9.0_11-3.9.1
4.9.0_11-3.9.1
xen
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 6 CVEs
 before 4.9.0_11-3.9.1
4.9.0_11-3.9.1
xen
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 6 CVEs
 before 4.9.0_11-3.9.1
4.9.0_11-3.9.1
xen
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 6 CVEs
 before 4.2.5_21-45.5.1
4.2.5_21-45.5.1
xen
SUSE:Linux Enterprise Server 11 SP3-LTSS
From an advisory covering 6 CVEs
 before 4.2.5_21-45.5.1
4.2.5_21-45.5.1
xen
SUSE:Linux Enterprise Software Development Kit 11 SP4
From an advisory covering 10 CVEs
 before 4.4.4_22-61.9.2
4.4.4_22-61.9.2
xen
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 10 CVEs
 before 4.4.4_22-61.9.2
4.4.4_22-61.9.2
xen
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 10 CVEs
 before 4.4.4_22-61.9.2
4.4.4_22-61.9.2
xen
SUSE:Linux Enterprise Server for SAP Applications 12
From an advisory covering 10 CVEs
 before 4.4.4_22-22.51.2
4.4.4_22-22.51.2
xen
SUSE:Linux Enterprise Server 12-LTSS
From an advisory covering 10 CVEs
 before 4.4.4_22-22.51.2
4.4.4_22-22.51.2
xen
Ubuntu:14.04:LTS
 before 4.4.2-0ubuntu0.14.04.14, plus listed versions
4.3.0-1ubuntu14.3.0-1ubuntu24.3.0-1ubuntu34.3.0-1ubuntu44.3.0-1ubuntu5
Show 22 moreShow less
4.4.0-0ubuntu34.4.0-0ubuntu44.4.0-0ubuntu54.4.0-0ubuntu5.14.4.0-0ubuntu5.24.4.1-0ubuntu0.14.04.14.4.1-0ubuntu0.14.04.24.4.1-0ubuntu0.14.04.34.4.1-0ubuntu0.14.04.44.4.1-0ubuntu0.14.04.54.4.1-0ubuntu0.14.04.64.4.2-0ubuntu0.14.04.14.4.2-0ubuntu0.14.04.24.4.2-0ubuntu0.14.04.34.4.2-0ubuntu0.14.04.44.4.2-0ubuntu0.14.04.54.4.2-0ubuntu0.14.04.64.4.2-0ubuntu0.14.04.74.4.2-0ubuntu0.14.04.94.4.2-0ubuntu0.14.04.104.4.2-0ubuntu0.14.04.114.4.2-0ubuntu0.14.04.12
4.4.2-0ubuntu0.14.04.14
xen
Ubuntu:16.04:LTS
 before 4.6.5-0ubuntu1.4, plus listed versions
4.5.1-0ubuntu14.5.1-0ubuntu24.6.0-1ubuntu14.6.0-1ubuntu24.6.0-1ubuntu4
Show 6 moreShow less
4.6.0-1ubuntu4.14.6.0-1ubuntu4.24.6.0-1ubuntu4.34.6.5-0ubuntu14.6.5-0ubuntu1.14.6.5-0ubuntu1.2
4.6.5-0ubuntu1.4

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-12855 is a medium vulnerability (CVSS 6.5) in Xen, published August 15, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in xen 4.9.0-r1.

References

Show 42 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open