CVE-2017-17046
Fixed in a distro release EPSS <1%
An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a reboot, because disjoint blocks, and physical addresses that do not start at zero, are mishandled.
Products: xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.4 | xen | 4.6.6-r2 |
| Alpine 3.5 | xen | 4.7.3-r3 |
| Alpine 3.6 | xen | 4.8.2-r3 |
| Debian 12 | xen | 4.8.2+xsa245-0+deb9u1 |
| Debian 13 | xen | 4.8.2+xsa245-0+deb9u1 |
| Debian 14 | xen | 4.8.2+xsa245-0+deb9u1 |
| Debian 8 | xen | 4.4.4lts2-0+deb8u1 |
| Debian 9 | xen | 4.8.2+xsa245-0+deb9u1 |
| Ubuntu 16.04 LTS | xen | 4.6.5-0ubuntu1.4 |
| Ubuntu 18.04 LTS | xen | 4.9.2-0ubuntu1 |