CVE-2017-10916

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-07-05 · updated 2026-06-17
Weakness: CWE-200

Description

The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS users to defeat ASLR and other protection mechanisms, aka XSA-220.

Affected products

xen: 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.5, 4.6.0 (+7)

References

http://www.debian.org/security/2017/dsa-3969
http://www.securityfocus.com/bid/99167
http://www.securitytracker.com/id/1038730
https://security.gentoo.org/glsa/201708-03
https://xenbits.xen.org/xsa/advisory-220.html
http://www.debian.org/security/2017/dsa-3969
http://www.securityfocus.com/bid/99167
http://www.securitytracker.com/id/1038730
https://security.gentoo.org/glsa/201708-03
https://xenbits.xen.org/xsa/advisory-220.html

Get alerted when CVE-2017-10916 or the next vulnerability affects your stack