CWE Code: 436
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Interpretation Conflict
Summary: an issue was discovered in xen through 4.11.x allowing x86 pv guest os users to cause a denial of service (host os crash) or possibly gain host os privileges because of an interpretation conflict for a union data structure associated with shadow paging. note: this issue exists because of an incorrect fix for cve-2017-15595.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-12-08
Last Modified Date: 2019-10-03