Candidate: CVE-2017-15592 PublicDate: 2017-10-18 08:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15592 https://xenbits.xen.org/xsa/advisory-243.html Description: An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because self-linear shadow mappings are mishandled for translated guests. Ubuntu-Description: Notes: mdeslaur> hypervisor packages are in universe. For mdeslaur> issues in the hypervisor, add appropriate mdeslaur> tags to each section, ex: mdeslaur> Tags_xen: universe-binary Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H [8.8 HIGH] Patches_xen: -- Tags_xen: universe-binary upstream_xen: released (4.9.1) precise/esm_xen: DNE trusty_xen: ignored (reached end-of-life) trusty/esm_xen: DNE (trusty was needs-triage) xenial_xen: released (4.6.4-0ubuntu1.4) esm-infra/xenial_xen: released (4.6.4-0ubuntu1.4) zesty_xen: ignored (reached end-of-life) artful_xen: ignored (reached end-of-life) bionic_xen: released (4.9.2-0ubuntu1) cosmic_xen: not-affected (4.9.2-0ubuntu1) disco_xen: not-affected (4.9.2-0ubuntu1) devel_xen: not-affected (4.9.2-0ubuntu1)