CVE-2019-17351

An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of service because of unrestricted resource consumption during the mapping of guest memory, aka CID-6ef36ab967c7.

• CWE-770

• http://www.openwall.com/lists/oss-security/2019/10/25/9
• http://xenbits.xen.org/xsa/advisory-300.html
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3Third Party Advisory
• https://github.com/torvalds/linux/commit/6ef36ab967c71690ebe7e5ef997a8be4da3bc844Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20191031-0005/
• https://usn.ubuntu.com/4286-1/
• https://usn.ubuntu.com/4286-2/
• https://xenbits.xen.org/xsa/advisory-300.htmlVendor Advisory
• http://www.openwall.com/lists/oss-security/2019/10/25/9
• http://xenbits.xen.org/xsa/advisory-300.html
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3Third Party Advisory
• https://github.com/torvalds/linux/commit/6ef36ab967c71690ebe7e5ef997a8be4da3bc844Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20191031-0005/
• https://usn.ubuntu.com/4286-1/
• https://usn.ubuntu.com/4286-2/
• https://xenbits.xen.org/xsa/advisory-300.htmlVendor Advisory

Published

Oct 8, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17346An issue was discovered in Xen through 4.11.x allowing x86 P…8.8
• CVE-2019-17347An issue was discovered in Xen through 4.11.x allowing x86 P…7.8
• CVE-2019-17348An issue was discovered in Xen through 4.11.x allowing x86 P…6.5
• CVE-2019-17349An issue was discovered in Xen through 4.12.x allowing Arm d…5.5
• CVE-2019-1735A vulnerability in the CLI of Cisco NX-OS Software could all…7.8
• CVE-2019-17350An issue was discovered in Xen through 4.12.x allowing Arm d…5.5
• CVE-2019-17352In JFinal cos before 2019-08-13, as used in JFinal 4.4, ther…7.5
• CVE-2019-17353An issue discovered on D-Link DIR-615 devices with firmware …8.2
• CVE-2019-17354wan.htm page on Zyxel NBG-418N v2 with firmware version V1.0…9.4
• CVE-2019-17355In the Orbitz application 19.31.1 for Android, the username …9.8
• CVE-2019-17356The Infinite Design application 3.4.12 for Android sends a u…6.5
• CVE-2019-17357Cacti through 1.2.7 is affected by a graphs.php?template_id=…6.5