CVE-2017-10916 is an information exposure vulnerability affecting Xen hypervisor versions through 4.8.x caused by improper vCPU context-switch interactions with Memory Protection Extensions (MPX) and Protection Key (PKU) hardware features. Rated as High severity with a CVSS score of 7.5, this flaw allows guest OS users to bypass critical security defenses such as Address Space Layout Randomization (ASLR), leading to a high impact on confidentiality. Despite the severity, there is currently no evidence of active exploitation in the wild, and no public exploit code or Metasploit modules have been identified.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
4.5.0CPE matchmatch criteria | cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:* | ||
4.5.1CPE matchmatch criteria | cpe:2.3:o:xen:xen:4.5.1:*:*:*:*:*:*:* | ||
4.5.2CPE matchmatch criteria | cpe:2.3:o:xen:xen:4.5.2:*:*:*:*:*:*:* | ||
4.5.3CPE matchmatch criteria | cpe:2.3:o:xen:xen:4.5.3:*:*:*:*:*:*:* | ||
4.5.5CPE matchmatch criteria | cpe:2.3:o:xen:xen:4.5.5:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.