CVE-2017-10916

Name	CVE-2017-10916
Description	The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS users to defeat ASLR and other protection mechanisms, aka XSA-220.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
NVD severity	medium (attack range: remote)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
xen (PTS)	wheezy	4.1.4-3+deb7u9	fixed
	wheezy (security)	4.1.6.lts1-8	fixed
	jessie (security), jessie	4.4.1-9+deb8u9	fixed
	buster, sid, stretch	4.8.1-1+deb9u1	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency
xen	source	(unstable)	(unfixed)	medium
xen	source	jessie	(not affected)
xen	source	wheezy	(not affected)

Notes

[jessie] - xen <not-affected> (Vulnerable code not present)
[wheezy] - xen <not-affected> (Vulnerable code not present)
https://xenbits.xen.org/xsa/advisory-220.html