CVE-2017-15592

Name: CVE-2017-15592
Creator: NVD / NIST
Published: 2017-10-18T08:29:00.483+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.43%

Last modified Jun 17, 2026

CVE-2017-15592 is a vulnerability of currently unknown severity. An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because self-linear shadow mappings are mishandled for translated guests.. EPSS estimates a 0.43% chance of exploitation in the next 30 days.

Description

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because self-linear shadow mappings are mishandled for translated guests.

Metrics

EPSS Probability

0.43%

34.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-668

Affected Software

Vendor	Product	Versions
Xen	Xen	<= 4.9.0

References

http://www.securityfocus.com/bid/101513Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/102129
http://www.securitytracker.com/id/1039568Third Party Advisory, VDB Entry
https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html
https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html
https://security.gentoo.org/glsa/201801-14
https://support.citrix.com/article/CTX228867
https://support.citrix.com/article/CTX230138
https://www.debian.org/security/2017/dsa-4050
https://xenbits.xen.org/xsa/advisory-243.htmlMitigation, Patch, Vendor Advisory
http://www.securityfocus.com/bid/101513Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/102129
http://www.securitytracker.com/id/1039568Third Party Advisory, VDB Entry
https://lists.debian.org/debian-lts-announce/2017/11/msg00027.html
https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html
https://security.gentoo.org/glsa/201801-14
https://support.citrix.com/article/CTX228867
https://support.citrix.com/article/CTX230138
https://www.debian.org/security/2017/dsa-4050
https://xenbits.xen.org/xsa/advisory-243.htmlMitigation, Patch, Vendor Advisory

Timeline

Published: Oct 18, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-15592?

How severe is CVE-2017-15592?

Severity scoring for CVE-2017-15592 is pending analysis. The EPSS model estimates a 0.43% probability of exploitation in the next 30 days.

How do I fix CVE-2017-15592?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-15592?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST