cbcvebase.
CVE-2020-27671
published 2020-10-22

CVE-2020-27671: An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or…

PriorityP335high7.8CVSS 3.1
AVLACHPRLUINSCCHIHAH
EPSS
0.34%
26.6th percentile
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.

Affected

16 ranges
VendorProductVersion rangeFixed in
debiandebian_linux——
debianxen< xen 4.14.0+80-gd101b417b7-1 (bookworm)xen 4.14.0+80-gd101b417b7-1 (bookworm)
debianxen< xen 4.14.0+88-g1d1d1f5391-1 (bookworm)xen 4.14.0+88-g1d1d1f5391-1 (bookworm)
fedoraprojectfedora——
opensuseleap——
opensuseleap——
xenxen<= 4.14.0—
xenxen>= 0 < 4.14.0+80-gd101b417b7-14.14.0+80-gd101b417b7-1
xenxen>= 0 < 4.14.0+88-g1d1d1f5391-14.14.0+88-g1d1d1f5391-1
xenxen>= 0 < 4.14.0+80-gd101b417b7-14.14.0+80-gd101b417b7-1
xenxen>= 0 < 4.14.0+88-g1d1d1f5391-14.14.0+88-g1d1d1f5391-1
xenxen>= 0 < 4.14.0+80-gd101b417b7-14.14.0+80-gd101b417b7-1
xenxen>= 0 < 4.14.0+88-g1d1d1f5391-14.14.0+88-g1d1d1f5391-1
xenxen>= 0 < 4.14.0+80-gd101b417b7-14.14.0+80-gd101b417b7-1
xenxen>= 0 < 4.14.0+88-g1d1d1f5391-14.14.0+88-g1d1d1f5391-1
xenxen4.2.0 – 4.14.0—

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.