CVE-2020-29481 — Improper Privilege Management in XEN

CWE-269 — Improper Privilege ManagementCWE-668 — Resource Exposure4 documents4 sources
Severity
8.8HIGHNVD
EPSS
0.1%
top 79.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
XENDebian XENDebian Linux+1 more
Timeline
PublishedDec 15
Latest updateMay 24

Description

An issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid. Unfortunately, existing granted access rights are not removed when a domain is being destroyed. This means that a new domain created with the same domid will inherit the access rights to Xenstore nodes from the previous domain(s) with the same domid. Because all Xenstore entries of a guest below /local/domain/ are being deleted by Xen tools when a guest is destroyed, only Xenstore entries of other guest…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HExploitability: 2.0 | Impact: 6.0

Affected Packages3 packages

▶debiandebian/xen< xen 4.14.0+88-g1d1d1f5391-1 (bookworm)
▶Debianxen/xen< 4.14.0+88-g1d1d1f5391-1+3
▶NVDxen/xen4.14.0

Also affects: Debian Linux 10.0, Fedora 32, 33

Patches

Patch: xenbits.xenproject.org ↗Patch: xenbits.xenproject.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-vcqm-hqq4-5mxm: An issue was discovered in Xen through 4↗2022-05-24
▶
OSV
CVE-2020-29481: An issue was discovered in Xen through 4↗2020-12-15
▶

📋Vendor Advisories

1
Debian
CVE-2020-29481: xen - An issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes a...↗2020
▶