CVE-2019-17346

HIGH8.8EPSS 0.18%

Published: 10/8/2019Modified: 11/19/2025

Also known as:ALPINE-CVE-2019-17346DEBIAN-CVE-2019-17346

Description

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) and TLB flushes.

Affected packages (2)

Alpine/xenfrom 0, < 4.11.2-r0
Debian/xenfrom 0, < 4.11.1+92-g6c33308a8d-1

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH8.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2019-17346
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2019-17346