CVE-2017-17566

CVE-2017-17566 describes a denial-of-service or privilege escalation vulnerability affecting Xen through version 4.9.x, where a malicious PV guest OS user can crash the host or gain host privileges by manipulating an auxiliary page. With a CVSS score of 7.8 (High), this vulnerability requires local access and high attack complexity, but can lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.