Low severity · published May 3, 2017
CVE-2017-7995
Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure
3.8
CVSS
0.4%
EPSS
No
On KEV
Description
Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Manager · Suse
2.1 · source: NVD
MP
Manager Proxy · Suse
2.1 · source: NVD
OC
Openstack Cloud · Suse
5 · source: NVD
SL
Suse Linux Enterprise Point OF Sale · Novell
11.0 · source: NVD
SL
Suse Linux Enterprise Server · Novell
11.0 · source: NVD
XE
Xen · Xen
through 4.2.5 · source: NVD
Affected product
SL
Suse Linux Enterprise Point OF Sale
Novell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-7995
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-7995
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00005.html
Third Party Advisory
http://www.securityfocus.com/bid/98314
Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1033948
More from Suse Linux Enterprise Point OF Sale
7.8
CVE-2017-1000366
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code…