CVE-2017-14316

CVE Details

Release Date:	2017-09-12
Impact:	Important	What is this?

Description

A parameter verification issue was discovered in Xen through 4.9.x. Thefunction 'alloc_heap_pages' allows callers to specify the first NUMA node that should be used for allocations through the 'memflags' parameter; the node is extracted using the 'MEMF_get_node' macro. While the function checks to see if the special constant 'NUMA_NO_NODE' is specified, it otherwise does not handle the case where 'node >= MAX_NUMNODES'. This allows an out-of-bounds access to an internal array.

See more information about CVE-2017-14316 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v2 metrics

Base Score:	7.2
Vector String:	AV:L/AC:L/Au:N/C:C/I:C/A:C
Version:	2.0
Attack Vector:	Local
Attack Complexity:	Low
Authentication:	None
Confidentiality Impact:	Complete
Integrity Impact:	Complete
Availability Impact:	Complete

Errata information

Platform	Errata	Release Date
Oracle VM version 3.2 (xen)	OVMSA-2017-0159	2017-10-24
Oracle VM version 3.3 (xen)	OVMSA-2017-0158	2017-10-24
Oracle VM version 3.4 (xen)	OVMSA-2017-0157	2017-10-24