UpHeron
All vulnerabilities

Servers and applications

CVE-2017-14318

An issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mapping to the calling domain exists for the page in question. However, the function does not check…

Severity
Medium 6.5
Published
12 Sept 2017
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
0.4% in the next 30 daysHigher than 29% of CVEs. EPSS by FIRST, 11 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
XenServers and applications · cpe:o:xen:xen
  • Version 4.9.0
  • Version 4.8.1
  • Version 4.8.0
  • Version 4.7.3
All 18 release lines
  • Version 4.5.0
  • Version 4.5.1
  • Version 4.5.2
  • Version 4.5.3
  • Version 4.5.5
  • Version 4.6.0
  • Version 4.6.1
  • Version 4.6.3
  • Version 4.6.4
  • Version 4.6.5
  • Version 4.6.6
  • Version 4.7.0
  • Version 4.7.1
  • Version 4.7.2
  • Version 4.7.3
  • Version 4.8.0
  • Version 4.8.1
  • Version 4.9.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-14318
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-14318