CVE-2017-12855

CVE Details

Release Date:	2017-08-15
Impact:	Moderate	What is this?

Description

Xen maintains the _GTF_{read,writ}ing bits as appropriate, to informthe guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected.

See more information about CVE-2017-12855 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v2 metrics

Base Score:	2.1
Vector String:	AV:L/AC:L/Au:N/C:P/I:N/A:N
Version:	2.0
Attack Vector:	Local
Attack Complexity:	Low
Authentication:	None
Confidentiality Impact:	Partial
Integrity Impact:	None
Availability Impact:	None

Errata information

Platform	Errata	Release Date
Oracle VM version 3.2 (xen)	OVMSA-2017-0149	2017-08-31
Oracle VM version 3.3 (xen)	OVMSA-2017-0148	2017-08-31
Oracle VM version 3.4 (xen)	OVMSA-2017-0142	2017-08-25