ALPINE-CVE-2017-17044

ALPINE-CVE-2017-17044 PUBLISHED CVSS 6.5 MEDIUM

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop and host OS hang) by leveraging the mishandling of Populate on Demand (PoD) errors.

Risk Scores

CVSS v3.0

6.5

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Alpine:v3.5	xen	4.7.1-r3, 0, 4.0.1-r0
Alpine:v3.6	xen	4.7.1-r0, 4.7.1-r1, 4.7.1-r2

Timeline

Nov 28, 2017 CVE Published
Nov 19, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2017-17044 advisory

Open in Interactive Console →