Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-15594

Fixed in a distro release EPSS <1%

An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service (hypervisor crash) or gain privileges because IDT settings are mishandled during CPU hotplugging.

Published 2017-10-18 · CVE record · OSV

Products: xen

Distro releases

ReleasePackageFixed in
Alpine 3.10xen4.9.0-r6
Alpine 3.11xen4.9.0-r6
Alpine 3.12xen4.9.0-r6
Alpine 3.13xen4.9.0-r6
Alpine 3.14xen4.9.0-r6
Alpine 3.15xen4.9.0-r6
Alpine 3.16xen4.9.0-r6
Alpine 3.17xen4.9.0-r6
Alpine 3.18xen4.9.0-r6
Alpine 3.19xen4.9.0-r6
Alpine 3.20xen4.9.0-r6
Alpine 3.21xen4.9.0-r6
Alpine 3.22xen4.9.0-r6
Alpine 3.23xen4.9.0-r6
Alpine 3.24xen4.9.0-r6
Alpine 3.4xen4.6.6-r2
Alpine 3.5xen4.7.3-r3
Alpine 3.6xen4.8.2-r3
Alpine 3.7xen4.9.0-r6
Alpine 3.8xen4.9.0-r6
Alpine 3.9xen4.9.0-r6
Debian 12xen4.8.2+xsa245-0+deb9u1
Debian 13xen4.8.2+xsa245-0+deb9u1
Debian 14xen4.8.2+xsa245-0+deb9u1
Debian 8xen4.4.4lts3-0+deb8u1
Debian 9xen4.8.2+xsa245-0+deb9u1
SUSE Linux Enterprise Desktop 12 SP2xen4.7.3_06-43.15.1
SUSE Linux Enterprise Point of Sale 11 SP3xen4.2.5_21-45.11.1
SUSE Linux Enterprise Server 11 SP3-LTSSxen4.2.5_21-45.11.1
SUSE Linux Enterprise Server 11 SP4xen4.4.4_24-61.12.1
SUSE Linux Enterprise Server 12 SP1-LTSSxen4.5.5_18-22.31.1
SUSE Linux Enterprise Server 12 SP2xen4.7.3_06-43.15.1
SUSE Linux Enterprise Server 12-LTSSxen4.4.4_24-22.54.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4xen4.4.4_24-61.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1xen4.5.5_18-22.31.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2xen4.7.3_06-43.15.1
SUSE Linux Enterprise Software Development Kit 11 SP4xen4.4.4_24-61.12.1
SUSE Linux Enterprise Software Development Kit 12 SP2xen4.7.3_06-43.15.1
SUSE OpenStack Cloud 6xen4.5.5_18-22.31.1
Ubuntu 18.04 LTSxen4.9.2-0ubuntu1