CVE-2017-15589

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

• CWE-200

• http://www.securityfocus.com/bid/101496Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039568Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html
• https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
• https://security.gentoo.org/glsa/201801-14
• https://support.citrix.com/article/CTX228867
• https://www.debian.org/security/2017/dsa-4050
• https://xenbits.xen.org/xsa/advisory-239.htmlMailing List, Mitigation, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/101496Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039568Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html
• https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html
• https://security.gentoo.org/glsa/201801-14
• https://support.citrix.com/article/CTX228867
• https://www.debian.org/security/2017/dsa-4050
• https://xenbits.xen.org/xsa/advisory-239.htmlMailing List, Mitigation, Patch, Vendor Advisory

Published

Oct 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15580osTicket 1.10.1 provides a functionality to upload 'html' fi…
• CVE-2017-15581In the "Diary with lock" (aka WriteDiary) application 4.72 f…
• CVE-2017-15582In net.MCrypt in the "Diary with lock" (aka WriteDiary) appl…
• CVE-2017-15583The embedded web server on ABB Fox515T 1.0 devices is vulner…
• CVE-2017-15587An integer overflow was discovered in pdf_read_new_xref_sect…
• CVE-2017-15588An issue was discovered in Xen through 4.9.x allowing x86 PV…
• CVE-2017-1559Multiple IBM Rational products could disclose sensitive info…3.1
• CVE-2017-15590An issue was discovered in Xen through 4.9.x allowing x86 gu…
• CVE-2017-15591An issue was discovered in Xen 4.5.x through 4.9.x allowing …
• CVE-2017-15592An issue was discovered in Xen through 4.9.x allowing x86 HV…
• CVE-2017-15593An issue was discovered in Xen through 4.9.x allowing x86 PV…
• CVE-2017-15594An issue was discovered in Xen through 4.9.x allowing x86 SV…