CVE-2021-28700: Medium severity xen xapi vulnerability
xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen. Unfortunately, the memory limit from them is not set. This allow a domain to allocate memory beyond what an administrator originally configured.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-28700?
CVE-2021-28700 is considered a medium severity vulnerability due to the potential for unprivileged domains to allocate excessive memory.
How do I fix CVE-2021-28700?
To fix CVE-2021-28700, ensure you update to the latest versions of Xen, such as 4.11.4+107-gef32c7afa2-1 or higher.
What versions of Xen are affected by CVE-2021-28700?
CVE-2021-28700 affects Xen versions starting from 4.12.0 and includes specific versions up to 4.17.2+55-g0b56bed864-1.
What is the risk of having CVE-2021-28700 unpatched in my system?
Leaving CVE-2021-28700 unpatched can allow unprivileged domains to consume unlimited memory, potentially leading to Denial of Service attacks.
Is CVE-2021-28700 specific to any operating systems?
CVE-2021-28700 primarily affects Xen running on Debian and Fedora operating systems.