CVE-2017-14316

A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to specify the first NUMA node that should be used for allocations through the `memflags` parameter; the node is extracted using the `MEMF_get_node` macro. While the function checks to see if the special constant `NUMA_NO_NODE` is specified, it otherwise does not handle the case where `node >= MAX_NUMNODES`. This allows an out-of-bounds access to an internal array.

• CWE-125

• http://www.securityfocus.com/bid/100818Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039348Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-231.htmlPatch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
• https://support.citrix.com/article/CTX227185
• https://www.debian.org/security/2017/dsa-4050
• http://www.securityfocus.com/bid/100818Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039348Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-231.htmlPatch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
• https://support.citrix.com/article/CTX227185
• https://www.debian.org/security/2017/dsa-4050

Published

Sep 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14310STDU Viewer 1.6.375 allows attackers to cause a denial of se…
• CVE-2017-14311The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2…
• CVE-2017-14312Nagios Core through 4.3.4 initially executes /usr/sbin/nagio…
• CVE-2017-14313The shibboleth_login_form function in shibboleth.php in the …
• CVE-2017-14314Off-by-one error in the DrawImage function in magick/render.…
• CVE-2017-14315In Apple iOS 7 through 9, due to a BlueBorne flaw in the imp…
• CVE-2017-14317A domain cleanup issue was discovered in the C xenstore daem…
• CVE-2017-14318An issue was discovered in Xen 4.5.x through 4.9.x. The func…
• CVE-2017-14319A grant unmapping issue was discovered in Xen through 4.9.x.…
• CVE-2017-14320Mirasvit Helpdesk MX before 1.5.3 might allow remote attacke…
• CVE-2017-14321Multiple cross-site scripting (XSS) vulnerabilities in the a…
• CVE-2017-14322The function in charge to check whether the user is already …