CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. It may lead to a denial-of-service condition.
CVE
CVE-2017-10917
Severity
CRITICAL
CVSS
9.1
EPSS
2.57%
Original NVD Description
Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information, aka XSA-221.
Related CVEs
Other vulnerabilities affecting the same vendor(s)