CVE-2017-8904 in Xen
요약
\~에 의해 MITRE
Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer (aka guest transfer) operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.