CVE-2017-10916

Name	CVE-2017-10916
Description	The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS users to defeat ASLR and other protection mechanisms, aka XSA-220.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
xen (PTS)	buster, buster (security)	4.11.4+107-gef32c7afa2-1	fixed
	bullseye (security), bullseye	4.14.5+86-g1c354767d5-1	fixed
	bookworm, sid	4.17.0-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version
xen	source	wheezy	(not affected)
xen	source	jessie	(not affected)
xen	source	stretch	4.8.1-1+deb9u3
xen	source	(unstable)	4.8.1-1+deb9u3

Notes

[jessie] - xen <not-affected> (Vulnerable code not present)
[wheezy] - xen <not-affected> (Vulnerable code not present)
https://xenbits.xen.org/xsa/advisory-220.html