CVE-2017-12135

Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.

Weakness

The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

Affected Software

Potential Mitigations

• Use languages, libraries, or frameworks that make it easier to handle numbers without unexpected consequences.
• Examples include safe integer handling packages such as SafeInt (C++) or IntegerLib (C or C++).
• Use languages, libraries, or frameworks that make it easier to handle numbers without unexpected consequences.
• Examples include safe integer handling packages such as SafeInt (C++) or IntegerLib (C or C++).

Related Attack Patterns

• https://cwe.mitre.org/data/definitions/128.html
• https://cwe.mitre.org/data/definitions/129.html

References

• https://support.citrix.com/article/CTX225941
• https://bugzilla.redhat.com/show_bug.cgi?id=1477655
• http://xenbits.xen.org/xsa/advisory-226.html
• http://www.securitytracker.com/id/1039178
• http://www.securityfocus.com/bid/100344
• http://www.openwall.com/lists/oss-security/2017/08/17/6
• http://www.openwall.com/lists/oss-security/2017/08/15/1
• http://www.debian.org/security/2017/dsa-3969
• https://security.gentoo.org/glsa/201801-14
• http://www.openwall.com/lists/oss-security/2020/04/14/4