CVE-2020-29570

Name
CVE-2020-29570
Description
An issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping maintained by Xen and that of pointers into the control block is reversed. The consumer assumes, seeing the former initialized, that the latter are also ready for use. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system.
NVD Severity
medium
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Patch https://xenbits.xenproject.org/xsa/advisory-358.html
Third Party Advisory https://www.debian.org/security/2020/dsa-4812
Mailing List http://www.openwall.com/lists/oss-security/2020/12/16/4
Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OBLV6L6Q24PPQ2CRFXDX4Q76KU776GKI/
Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2C6M6S3CIMEBACH6O7V4H2VDANMO6TVA/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:* xen >= 4.4.0 <= 4.14.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
xen 3.10-main 4.12.4-r0 None possibly vulnerable
xen 3.12-main 4.13.4-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
xen 3.11-main 4.13.4-r0 Natanael Copa <ncopa@alpinelinux.org> fixed