Xen 'mm.c' Remote Privilege Escalation Vulnerability

Bugtraq ID:	100819
Class:	Design Error
CVE:	CVE-2017-14319
Remote:	Yes
Local:	No
Published:	Sep 14 2017 12:00AM
Updated:	Sep 15 2017 01:14PM
Credit:	Andrew Cooper (Citrix)
Vulnerable:	Xen Xen 4.9 Xen Xen 4.8 Xen Xen 4.7 Xen Xen 4.6 Xen Xen 4.0.4 Xen Xen 4.9 Xen Xen 4.6.3 Xen Xen 4.5.3 Xen Xen 4.5.0 Xen Xen 4.4.1 Xen Xen 4.4.0 Xen Xen 4.4 Xen Xen 4.3.1 Xen Xen 4.3.0-1 Xen Xen 4.3.0 Xen Xen 4.3 Xen Xen 4.2.3 Xen Xen 4.2.2 Xen Xen 4.2.1 Xen Xen 4.2.0 Xen Xen 4.1.6.1 Xen Xen 4.1.5 Xen Xen 4.1.4 Xen Xen 4.1.2 Xen Xen 4.1.1 Xen Xen 4.1.0 Xen Xen 4.1 Xen Xen 4.0.3 Xen Xen 4.0.2 Xen Xen 4.0.0 Xen Xen 4.0 Xen Xen 3.4.4 Xen Xen 3.4.3 Xen Xen 3.4.2 Xen Xen 3.4.0 Xen Xen 3.3.1 Xen Xen 3.3.0 Xen Xen 3.2.3 Xen Xen 3.2.2 Xen Xen 3.2.1 Xen Xen 3.2.0 Xen Xen 3.2 Xen Xen 3.1.4 Xen Xen 3.1.3 Xen Xen 3.1 Xen Xen 3.0.4 Xen Xen 3.0.3 Xen Xen 3.0.2 Xen Xen 2.0 Redhat Enterprise Linux 5 Citrix XenServer 6.0.2 Citrix XenServer 7.2 Citrix XenServer 7.1 Citrix XenServer 7.0 Citrix XenServer 6.5 Citrix XenServer 6.2
Not Vulnerable:

Xen 'mm.c' Remote Privilege Escalation Vulnerability

Xen is prone to a remote privilege-escalation vulnerability.

An attacker can exploit this issue to gain elevated privileges. Failed exploit attempts will likely result in denial of service conditions.

Xen 'mm.c' Remote Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Xen 'mm.c' Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Xen 'mm.c' Remote Privilege Escalation Vulnerability

References:

• CVE-2017-14319 (Redhat)
  
• Xen Homepage (XenSource )
  
• Bug 1486710 - (CVE-2017-14319, xsa234) CVE-2017-14319 xsa234 xen: insufficient (Redhat)
  
• Citrix XenServer Multiple Security Updates (IBM)
  
• Xen Security Advisory CVE-2017-14319 / XSA-234 (Xen)