CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: the grant-table feature in xen through 4.8.x does not ensure sufficient type counts for a gntmap_device_map and gntmap_host_map mapping, which allows guest os users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host os access, aka xsa-224 bug 2.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-07-05
Last Modified Date: 2019-10-03