Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2021-28700
HistoryAug 27, 2021 - 12:00 a.m.

CVE-2021-28700

2021-08-2700:00:00
ubuntu.com
ubuntu.com
12

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

0.004 Low

EPSS

Percentile

74.5%

JSON

xen/arm: No memory limit for dom0less domUs The dom0less feature allows an
administrator to create multiple unprivileged domains directly from Xen.
Unfortunately, the memory limit from them is not set. This allow a domain
to allocate memory beyond what an administrator originally configured.

Notes

Author Note
mdeslaur hypervisor packages are in universe. For issues in the hypervisor, add appropriate tags to each section, ex: Tags_xen: universe-binary

Related

redhatcve 1
xen 1
debiancve 1
osv 2
alpinelinux 1
cvelist 1
cve 1
veracode 1
prion 1
nvd 1
nessus 9
openvas 10
fedora 3
debian 1
suse 2
gentoo 1
redhatcve
redhatcve
CVE-2021-28700
2021-08-25 13:08:06
xen
xen
xen/arm: No memory limit for dom0less domUs
2021-08-25 12:00:00
debiancve
debiancve
CVE-2021-28700
2021-08-27 19:15:07
osv
osv
CVE-2021-28700
2021-08-27 19:15:07
xen - security update
2021-09-20 00:00:00
alpinelinux
alpinelinux
CVE-2021-28700
2021-08-27 19:15:00
cvelist
cvelist
CVE-2021-28700
2021-08-27 18:15:52
cve
cve
CVE-2021-28700
2021-08-27 19:15:07
veracode
veracode
Denial Of Service (DoS)
2021-09-08 07:37:10
prion
prion
Design/Logic Flaw
2021-08-27 19:15:00
nvd
nvd
CVE-2021-28700
2021-08-27 19:15:07
nessus
nessus
No memory limit for dom0less domUs (XSA-383)
2022-04-19 00:00:00
Debian DSA-4977-1 : xen - security update
2021-09-21 00:00:00
SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2021:2922-1)
2021-09-04 00:00:00
openvas
openvas
Fedora: Security Advisory for xen (FEDORA-2021-081f9bf5d2)
2021-10-02 00:00:00
Fedora: Security Advisory for xen (FEDORA-2021-d68ed12e46)
2021-09-09 00:00:00
Fedora: Security Advisory for xen (FEDORA-2021-4f129cc0c1)
2021-09-09 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: xen-4.14.2-3.fc33
2021-09-05 21:27:29
[SECURITY] Fedora 35 Update: xen-4.15.0-6.fc35
2021-09-24 20:36:42
[SECURITY] Fedora 34 Update: xen-4.14.2-3.fc34
2021-09-05 21:14:47
debian
debian
[SECURITY] [DSA 4977-1] xen security update
2021-09-20 19:08:44
suse
suse
Security update for xen (important)
2021-09-02 00:00:00
Security update for xen (important)
2021-09-07 00:00:00
gentoo
gentoo
Xen: Multiple Vulnerabilities
2022-08-14 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

0.004 Low

EPSS

Percentile

74.5%

JSON
Related for UB:CVE-2021-28700
redhatcve1xen1debiancve1osv2alpinelinux1cvelist1cve1veracode1prion1nvd1nessus9openvas10fedora3debian1suse2gentoo1