vulnerability

Alpine Linux: CVE-2017-10921: Improper Restriction of Operations within the Bounds of a Memory Buffer

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
2017-07-05
Added
2017-10-27
Modified
2024-10-01

Description

The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2.

Solution

alpine-linux-upgrade-xen
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.