CVE-2017-7995

Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL.

CVSS v3 3.8 LOW
CVSS v2.0 1.7 LOW

3.8^/10

CVSS v3 : LOW

Vector : AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Exploitability : 2.0 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

1.7^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 3.1 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00005.html	Third Party Advisory
http://www.securityfocus.com/bid/98314	Third Party Advisory VDB Entry
https://bugzilla.suse.com/show_bug.cgi?id=1033948	Issue Tracking Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:a:suse:manager:2.1:::::::*
	cpe:2.3:a:suse:manager_proxy:2.1:::::::*
	cpe:2.3:a:suse:openstack_cloud:5:::::::*
	cpe:2.3:o:novell:suse_linux_enterprise_point_of_sale:11.0:sp3::::::
	cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:::ltss:::*

History

No history.

Information

Published : 2017-05-03 19:59

Updated : 2023-12-10 12:01

NVD link : CVE-2017-7995

Mitre link : CVE-2017-7995

CVE.ORG link : CVE-2017-7995

JSON object : View

Products Affected

suse

openstack_cloud
manager_proxy
manager

xen

xen

novell

suse_linux_enterprise_server
suse_linux_enterprise_point_of_sale

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2017-7995", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.7, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.1, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 3.8, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.0}]}, "published": "2017-05-03T19:59:00.143", "references": [{"url": "http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00005.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/98314", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://bugzilla.suse.com/show_bug.cgi?id=1033948", "tags": ["Issue Tracking", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL."}, {"lang": "es", "value": "Xen PV guest anterior a Xen 4.3 chequea los permisos de acceso a los rangos MMIO s\u00f3lo despu\u00e9s de acceder a ellos, lo que permite leer en un dispositivo de memoria PCI, dando lugar a la divulgaci\u00f3n de informaci\u00f3n. Se trata de un error en la funci\u00f3n get_user. NOTA: el upstream Xen Project considera versiones anteriores a 4.5.x para ser EOL."}], "lastModified": "2017-05-15T17:45:10.270", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9213743B-275F-4056-81E8-E44E18A81FCA", "versionEndIncluding": "4.2.5"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:suse:manager:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD4EEF7C-CC33-4494-8531-7C0CC28A8823"}, {"criteria": "cpe:2.3:a:suse:manager_proxy:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CBED083-B935-4C47-BBDA-F39D8EA277ED"}, {"criteria": "cpe:2.3:a:suse:openstack_cloud:5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD6136E8-74DE-48AF-A8AB-B0E93D34870C"}, {"criteria": "cpe:2.3:o:novell:suse_linux_enterprise_point_of_sale:11.0:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51E07D0D-67A6-4DDE-BE4E-959DE0A3314F"}, {"criteria": "cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:ltss:*:*:*", "vulnerable": true, "matchCriteriaId": "3F8CE3BD-993B-407F-BAEC-A070F6B46E6E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}