CVE-2017-7995 | BDVDB-2026-85080 Detail

Description#

Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/98314
https://bugzilla.suse.com/show_bug.cgi?id=1033948
http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00005.html

Exploit#

No public exploit known

History#

Version 12017-05-03Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.