CVE-2017-14317

A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. The xenstored daemon may crash, resulting in a DoS of any parts of the system relying on it (including domain creation / destruction, ballooning, device changes, etc.).

• CWE-362

• http://www.securityfocus.com/bid/100826Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039350Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-233.htmlPatch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
• https://www.debian.org/security/2017/dsa-4050
• http://www.securityfocus.com/bid/100826Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039350Third Party Advisory, VDB Entry
• http://xenbits.xen.org/xsa/advisory-233.htmlPatch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
• https://www.debian.org/security/2017/dsa-4050

Published

Sep 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14311The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2…
• CVE-2017-14312Nagios Core through 4.3.4 initially executes /usr/sbin/nagio…
• CVE-2017-14313The shibboleth_login_form function in shibboleth.php in the …
• CVE-2017-14314Off-by-one error in the DrawImage function in magick/render.…
• CVE-2017-14315In Apple iOS 7 through 9, due to a BlueBorne flaw in the imp…
• CVE-2017-14316A parameter verification issue was discovered in Xen through…
• CVE-2017-14318An issue was discovered in Xen 4.5.x through 4.9.x. The func…
• CVE-2017-14319A grant unmapping issue was discovered in Xen through 4.9.x.…
• CVE-2017-14320Mirasvit Helpdesk MX before 1.5.3 might allow remote attacke…
• CVE-2017-14321Multiple cross-site scripting (XSS) vulnerabilities in the a…
• CVE-2017-14322The function in charge to check whether the user is already …
• CVE-2017-14323SSRF (Server Side Request Forgery) in getRemoteImage.php in …