Vulnerability CVE-2020-29570

Vulnerability Name:

CVE-2020-29570 (CCN-193120)

Assigned:

2020-12-15

Published:

2020-12-15

Updated:

2021-12-10

Summary:

An issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping maintained by Xen and that of pointers into the control block is reversed. The consumer assumes, seeing the former initialized, that the latter are also ready for use. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system.

CVSS v3 Severity:

6.2 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
5.4 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

6.2 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
5.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

CVSS v2 Severity:

4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

4.9 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Complete

Vulnerability Type:

CWE-770

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2020-29570

Source: MLIST
Type: Mailing List, Third Party Advisory
[oss-security] 20201216 Xen Security Advisory 358 v5 (CVE-2020-29570) - FIFO event channels control block related ordering

Source: XF
Type: UNKNOWN
xen-cve202029570-dos(193120)

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2020-df772b417b

Source: FEDORA
Type: Mailing List, Third Party Advisory
FEDORA-2020-64859a826b

Source: GENTOO
Type: Third Party Advisory
GLSA-202107-30

Source: DEBIAN
Type: Third Party Advisory
DSA-4812

Source: CCN
Type: Xen Security Advisory XSA-358
FIFO event channels control block related ordering

Source: MISC
Type: Patch, Vendor Advisory
https://xenbits.xenproject.org/xsa/advisory-358.html

Vulnerable Configuration:

Configuration 1:

cpe:/o:xen:xen:*:*:*:*:*:*:*:* (Version >= 4.4.0 and <= 4.14.0)

Configuration 2:

cpe:/o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Configuration 3:

cpe:/o:fedoraproject:fedora:32:*:*:*:*:*:*:*

OR cpe:/o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:xensource:xen:4.4:*:*:*:*:*:*:*

OR cpe:/a:xensource:xen:4.5:*:*:*:*:*:*:*

OR cpe:/a:xensource:xen:4.6:*:*:*:*:*:*:*

OR cpe:/a:xensource:xen:4.7:*:*:*:*:*:*:*

OR cpe:/a:xensource:xen:4.8:*:*:*:*:*:*:*

OR cpe:/a:xensource:xen:4.9:*:*:*:*:*:*:*

OR cpe:/a:xensource:xen:4.10:*:*:*:*:*:*:*

OR cpe:/a:xensource:xen:4.11:*:*:*:*:*:*:*

OR cpe:/a:xensource:xen:4.12:*:*:*:*:*:*:*

OR cpe:/a:xensource:xen:4.13:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:7895	P	gnome-extensions-41.9-150400.3.8.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7945	P	libmicrohttpd-devel-0.9.57-150000.3.3.1 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:7831	P	xen-libs-4.17.0_06-150500.1.10 on GA media (Moderate)	2023-06-12
oval:org.opensuse.security:def:635	P	Security update for rubygem-activesupport-5_1 (Moderate) (in QA)	2022-09-29
oval:org.opensuse.security:def:3192	P	libjavascriptcoregtk-3_0-0-2.4.11-23.20 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3363	P	screen-4.0.4-23.3.3 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3225	P	libopus0-1.1-3.1 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:3535	P	java-1_8_0-openjdk-1.8.0.222-27.35.2 on GA media (Moderate)	2022-06-28
oval:org.opensuse.security:def:94855	P	xen-libs-4.16.0_08-150400.2.12 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:95168	P	apache-commons-beanutils-1.9.4-1.68 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:95165	P	xen-4.16.0_08-150400.2.12 on GA media (Moderate)	2022-06-22
oval:org.opensuse.security:def:336	P	xen-libs-4.14.1_16-1.6 on GA media (Moderate)	2022-06-13
oval:org.opensuse.security:def:388	P	xen-libs-4.16.0_08-150400.2.12 on GA media (Moderate)	2022-06-10
oval:org.opensuse.security:def:113591	P	xen-4.15.1_01-1.2 on GA media (Moderate)	2022-01-17
oval:org.opensuse.security:def:94475	P	(Important)	2022-01-11
oval:org.opensuse.security:def:5340	P	Security update for libsndfile (Important)	2022-01-05
oval:org.opensuse.security:def:101881	P	Security update for ncurses (Moderate)	2021-10-20
oval:org.opensuse.security:def:106977	P	xen-4.15.1_01-1.2 on GA media (Moderate)	2021-10-01
oval:org.opensuse.security:def:96764	P	qemu-tools-3.1.0-7.1 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:96773	P	sharutils-4.15.2-2.21 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:96774	P	shim-15+git47-1.5 on GA media (Moderate)	2021-09-21
oval:org.opensuse.security:def:1265	P	Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP3) (Important)	2021-09-16
oval:org.opensuse.security:def:63385	P	xen-4.14.1_16-1.6 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:101411	P	xen-4.14.1_16-1.6 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:2296	P	xen-4.14.1_16-1.6 on GA media (Moderate)	2021-08-10
oval:org.opensuse.security:def:62354	P	xen-libs-4.14.1_16-1.6 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:101112	P	xen-libs-4.14.1_16-1.6 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:101188	P	libexempi-devel-2.4.5-3.3.2 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:72095	P	xen-libs-4.14.1_16-1.6 on GA media (Moderate)	2021-08-09
oval:org.opensuse.security:def:45462	P	Security update for xen (Important)	2021-01-05
oval:org.opensuse.security:def:41032	P	Security update for xen (Important)	2021-01-05
oval:org.opensuse.security:def:86486	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:32022	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:58664	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:84543	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:56925	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:87305	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:32841	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:85566	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:31102	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:57395	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:86036	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:31572	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:57845	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:23499	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:51487	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:84088	P	Security update for xen (Moderate)	2020-12-29
oval:org.opensuse.security:def:110928	P	Security update for xen (Moderate)	2020-12-26
oval:org.opensuse.security:def:29310	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:55786	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:82080	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:127077	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:9280	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:64452	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:102716	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:89104	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:23875	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:51863	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:108547	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:73574	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:118478	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:110384	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:69034	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:29963	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:21359	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:82517	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:10034	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:59449	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:89362	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:54696	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:109382	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:96026	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:125508	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:69420	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:88089	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:23109	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:51097	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:83170	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:66709	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:33626	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:59707	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:28873	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:55133	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:75777	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:81032	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:126680	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:8537	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:70174	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:88398	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:107854	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:117369	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:5620	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:33884	P	Security update for xen (Moderate)	2020-12-22
oval:org.opensuse.security:def:104085	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:90430	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:34338	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:98728	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:104791	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:91136	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:66429	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:25979	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:75497	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:105418	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:91778	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:4966	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:97395	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:64281	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:73403	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:68984	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:60161	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:98101	P	Security update for xen (Moderate)	2020-12-18
oval:org.opensuse.security:def:41884	P	Security update for xen (Moderate)	2020-12-16
oval:org.opensuse.security:def:46314	P	Security update for xen (Moderate)	2020-12-16

BACK