CVE-2017-15595
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.5%
from disclosure to weapon0 days
Published on NVDOct 18
1st PoCOct 18
exploitation probability
1.5%top 28% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and hypervisor crash) or possibly gain privileges via crafted page-table stacking.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/43014/unverifiedexploitdbwww.exploit-db.com/exploits/43014unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://lists.debian.org/debian-lts-announce/2017/11/msg00027.htmlhttps://lists.debian.org/debian-lts-announce/2018/10/msg00021.htmlhttps://security.gentoo.org/glsa/201801-14https://support.citrix.com/article/CTX228867https://www.debian.org/security/2017/dsa-4050https://www.exploit-db.com/exploits/43014/https://xenbits.xen.org/xsa/advisory-240.html