High severity8.8NVD Advisory· Published May 11, 2017· Updated Jun 17, 2026
CVE-2017-8905
CVE-2017-8905
Description
Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:o:xen:xen:4.6.0:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.6.1:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.6.2:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.6.3:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.6.4:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.6.5:*:*:*:*:*:*:*
- (no CPE)range: <=4.6.x
- osv-coords10 versionspkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSSpkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/xen&distro=SUSE%20OpenStack%20Cloud%206
< 4.2.5_21-44.1+ 9 more
- (no CPE)range: < 4.2.5_21-44.1
- (no CPE)range: < 4.2.5_21-44.1
- (no CPE)range: < 4.4.4_20-60.3
- (no CPE)range: < 4.5.5_12-22.18.1
- (no CPE)range: < 4.4.4_21-22.42.1
- (no CPE)range: < 4.4.4_20-60.3
- (no CPE)range: < 4.4.4_21-22.42.1
- (no CPE)range: < 4.5.5_12-22.18.1
- (no CPE)range: < 4.4.4_20-60.3
- (no CPE)range: < 4.5.5_12-22.18.1
Patches
Vulnerability mechanics
References
5- xenbits.xen.org/xsa/advisory-215.htmlnvdMitigationPatchVendor Advisory
- blog.xenproject.org/2017/05/02/updates-on-xsa-213-xsa-214-and-xsa-215/nvdVendor Advisory
- www.securityfocus.com/bid/98436nvd
- www.securitytracker.com/id/1038388nvd
- security.gentoo.org/glsa/201705-11nvd
News mentions
0No linked articles in our index yet.