CVE-2017-15595

HIGH

Xen < 4.9.0 - Denial of Service via Page-Table Stacking

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-15595. PoCs published by Google Security Research.

AI-analyzed exploit summary This PoC exploits a stack overflow vulnerability in Xen's pagetable cleanup mechanism by creating a chain of 1000 L4 pagetables that recursively reference each other, leading to a stack overflow when the first pagetable's type-pin is removed. The exploit is designed to run in a PV domain and causes a denial-of-service (DoS) condition.

Description

An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and hypervisor crash) or possibly gain privileges via crafted page-table stacking.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · textdoslinux

https://www.exploit-db.com/exploits/43014

View Code ZIP pw:eip

This PoC exploits a stack overflow vulnerability in Xen's pagetable cleanup mechanism by creating a chain of 1000 L4 pagetables that recursively reference each other, leading to a stack overflow when the first pagetable's type-pin is removed. The exploit is designed to run in a PV domain and causes a denial-of-service (DoS) condition.

Classification

Working Poc 100%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: Xen 4.8.1

No auth needed

Prerequisites: Access to a PV domain in Xen · Kernel headers installed · Ability to load kernel modules

MITRE ATT&CK