CVE-2017-10911
Summary
| CVE | CVE-2017-10911 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-07-05 01:29:00 UTC |
| Updated | 2025-04-20 01:37:25 UTC |
| Description | The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka XSA-216. |
Risk And Classification
Primary CVSS: v3.0 6.5 MEDIUM from [email protected]
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Problem Types: CWE-200 | n/a
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 6.5 | MEDIUM | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
| 2.0 | [email protected] | Primary | 4.9 | AV:L/AC:L/Au:N/C:C/I:N/A:N |
CVSS v3.0 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
ChangedConfidentiality
HighIntegrity
NoneAvailability
NoneCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
NoneAvailability
NoneAV:L/AC:L/Au:N/C:C/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Debian -- Security Information -- DSA-3920-1 qemu | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| Debian -- Security Information -- DSA-3945-1 linux | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| xen-blkback: don't leak stack data via response ring · torvalds/linux@089bc01 · GitHub | af854a3a-2127-422b-91ae-364da2661108 | github.com | Patch, Third Party Advisory |
| www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.11.8 | af854a3a-2127-422b-91ae-364da2661108 | www.kernel.org | Mailing List, Third Party Advisory |
| XSA-216 - Xen Security Advisories | af854a3a-2127-422b-91ae-364da2661108 | xenbits.xen.org | Mitigation, Vendor Advisory |
| Debian -- Security Information -- DSA-3927-1 linux | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| [SECURITY] [DLA 1497-1] qemu security update | af854a3a-2127-422b-91ae-364da2661108 | lists.debian.org | |
| Xen Block Interface Response Initialization Error Lets Local Guest System Users Obtain Potentially Sensitive Information from Other Guest Systems or the Host System - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | Third Party Advisory, VDB Entry |
| Xen 'blkif' Response Information Disclosure Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| kernel/git/torvalds/linux.git - Linux kernel source tree | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | Mailing List, Patch, Third Party Advisory |
| Gentoo Linux — Error 404 (Not Found) | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.