Lucene search
Veracode Vulnerability DatabaseVERACODE:28869HistoryDec 31, 2020 - 5:02 p.m.
Denial Of Service (DoS)
2020-12-3117:02:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.0004 Low
EPSS
Percentile
14.4%
xen is vulnerable to denial of service (DoS). The vulnerability exists in oxenstored, where a owner could give a node away, causing guest can run out of quota, or create an unbounded number of nodes owned by dom0, thus running xenstored out of memory.
References
lists.fedoraproject.org/archives/list/[email protected]/message/2C6M6S3CIMEBACH6O7V4H2VDANMO6TVA/
lists.fedoraproject.org/archives/list/[email protected]/message/OBLV6L6Q24PPQ2CRFXDX4Q76KU776GKI/
secdb.alpinelinux.org/v3.12/main.yaml
security.gentoo.org/glsa/202107-30
www.debian.org/security/2020/dsa-4812
xenbits.xenproject.org/xsa/advisory-352.html
Related
cve
cve
CVE-2020-29486
2020-12-15 18:15:15
cvelist
cvelist
CVE-2020-29486
2020-12-15 18:00:47
nvd
nvd
CVE-2020-29486
2020-12-15 18:15:15
debiancve
debiancve
CVE-2020-29486
2020-12-15 18:15:15
ubuntucve
ubuntucve
CVE-2020-29486
2020-12-15 00:00:00
nessus
nessus
Xen oxenstored DoS (XSA-352)
2020-12-31 00:00:00
Debian DSA-4812-1 : xen - security update
2020-12-16 00:00:00
Fedora 32 : xen (2020-df772b417b)
2020-12-28 00:00:00
prion
prion
Design/Logic Flaw
2020-12-15 18:15:00
osv
osv
CVE-2020-29486
2020-12-15 18:15:15
xen - security update
2020-12-15 00:00:00
xen
xen
oxenstored: node ownership can be changed by unprivileged clients
2020-12-15 12:00:00
citrix
citrix
Citrix Hypervisor Security Update
2020-12-15 13:18:47
openvas
openvas
Debian: Security Advisory (DSA-4812-1)
2020-12-16 00:00:00
Fedora: Security Advisory for xen (FEDORA-2020-df772b417b)
2020-12-25 00:00:00
Fedora: Security Advisory for xen (FEDORA-2020-64859a826b)
2020-12-25 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: xen-4.13.2-5.fc32
2020-12-25 01:27:27
[SECURITY] Fedora 33 Update: xen-4.14.0-14.fc33
2020-12-25 01:24:46
debian
debian
[SECURITY] [DSA 4812-1] xen security update
2020-12-15 12:50:41
gentoo
gentoo
Xen: Multiple vulnerabilities
2021-07-12 00:00:00