CVE-2020-29485: Medium severity xen xapi vulnerability
An issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XSRESETWATCHES request, not all tracking information is freed. A guest can cause unbounded memory usage in oxenstored. This can lead to a system-wide DoS. Only systems using the Ocaml Xenstored implementation are vulnerable. Systems using the C Xenstored implementation are not vulnerable.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-29485?
CVE-2020-29485 is classified as a high severity vulnerability due to its potential to cause unbounded memory usage leading to a denial of service.
How do I fix CVE-2020-29485?
To remediate CVE-2020-29485, upgrade to a fixed version of Xen such as 4.11.4+107-gef32c7afa2-1 or higher.
Which systems are affected by CVE-2020-29485?
CVE-2020-29485 affects systems using the Ocaml Xenstored implementation in Xen versions 4.6 through 4.14.x.
What are the potential impacts of CVE-2020-29485?
The impact of CVE-2020-29485 includes the possibility of a system-wide denial of service due to excessive memory consumption.
When was CVE-2020-29485 published?
CVE-2020-29485 was published on December 1, 2020.