Veracode Vulnerability DatabaseVERACODE:29095Privilege Escalation
0.0004 Low
EPSS
Percentile
14.4%
xen is vulnerable to privilege escalation. Guest OS users are able to cause a denial of service condition which could cause a data leak and possibly gaining privileges due to the mishandling of the coalescing of per-page IOMMU TLB flushes.
References
lists.opensuse.org/opensuse-security-announce/2020-10/msg00075.html
lists.opensuse.org/opensuse-security-announce/2020-11/msg00025.html
www.openwall.com/lists/oss-security/2021/01/19/8
xenbits.xen.org/xsa/advisory-346.html
lists.fedoraproject.org/archives/list/[email protected]/message/XIK57QJOVOPWH6RFRNMGOBCROBCKMDG2/
secdb.alpinelinux.org/v3.10/main.yaml
secdb.alpinelinux.org/v3.11/main.yaml
secdb.alpinelinux.org/v3.12/main.yaml
security.gentoo.org/glsa/202011-06
www.debian.org/security/2020/dsa-4804
xenbits.xen.org/xsa/advisory-346.html
Related
