Launchpad.net

CVE 2017-10912

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217.

See the CVE page on Mitre.org for more details.