CVE-2020-29568: Medium severity xen xapi vulnerability
An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OOM in the backend. All systems with a FreeBSD, Linux, or NetBSD (any version) dom0 are vulnerable.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-29568?
CVE-2020-29568 is classified as a high-severity vulnerability due to its potential to cause denial of service through out-of-memory (OOM) conditions.
How do I fix CVE-2020-29568?
To mitigate CVE-2020-29568, update to the patched versions of the affected software listed in the vendor's security advisory.
Which applications are affected by CVE-2020-29568?
CVE-2020-29568 affects Xen versions up to and including 4.14.1, as well as specific Debian Linux versions.
What kind of attack can be executed with CVE-2020-29568?
An attacker can exploit CVE-2020-29568 to overwhelm the system's resource handling capabilities, leading to denial of service.
Is there a specific patch for CVE-2020-29568?
Yes, specific versions of the Linux kernel and Xen that fix CVE-2020-29568 are available and should be applied to affected systems.