CVE-2020-29570: Medium severity xen xapi vulnerability
An issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping maintained by Xen and that of pointers into the control block is reversed. The consumer assumes, seeing the former initialized, that the latter are also ready for use. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-29570?
CVE-2020-29570 is a vulnerability in Xen through 4.14.x that involves a reversed recording of the per-vCPU control block mapping.
What is the severity of CVE-2020-29570?
CVE-2020-29570 has a severity rating of 6.2 (Medium).
Which software versions are affected by CVE-2020-29570?
The affected software versions include Debian Xen, Debian Debian Linux 10.0, Fedoraproject Fedora 32, and Fedoraproject Fedora 33.
How can a malicious or buggy guest kernel exploit CVE-2020-29570?
A malicious or buggy guest kernel can exploit CVE-2020-29570 by assuming the control block pointers are ready for use when seeing the per-vCPU control block mapping initialized.
Where can I find more information about CVE-2020-29570?
You can find more information about CVE-2020-29570 at the following references: [link1], [link2], [link3].