VYPR
Get started
← All advisories
High severity8.8NVD Advisory· Published May 11, 2017· Updated May 13, 2026

CVE-2017-8905

CVE-2017-8905

Description

Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215.

Affected products

6
  • Xen/Xen6 versions
    cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.6.2:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.6.4:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.6.5:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.