CVE-2017-8904
Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer (aka guest transfer) operations, which might allow PV guest OS users to execute…
Published: 2017-05-11 · CVSS: Unscored
Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer (aka guest transfer) operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7