CVE-2020-29568Allocation of Resources Without Limits or Throttling in Linux

Severity
6.5MEDIUMNVD
OSV7.8OSV4.1
EPSS
0.1%
top 80.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 15
Latest updateMay 24

Description

An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OOM in the backend. All systems with a FreeBSD, Linux, or NetBSD (any version) dom0 are vulnerable.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 2.0 | Impact: 4.0

Affected Packages4 packages

debiandebian/linux< linux 5.9.15-1 (bookworm)
Debianlinux/linux_kernel< 5.9.15-1+3
Ubuntulinux/linux_kernel< 4.4.0-203.235+2
NVDxen/xen4.14.1

Also affects: Debian Linux 10.0, 9.0

Patches

🔴Vulnerability Details

6
GHSA
GHSA-583r-j6r6-x57h: An issue was discovered in Xen through 42022-05-24
OSV
linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.8, linux-kvm, linux-oracle, linux-raspi vulnerabilities2021-02-25
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon vulnerabilities2021-02-25
OSV
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-dell300x, linux-gcp, linux-gcp-4.15, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabil2021-02-25
OSV
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-ra2021-02-25

📋Vendor Advisories

6
Ubuntu
Linux kernel vulnerabilities2021-02-25
Ubuntu
Linux kernel vulnerabilities2021-02-25
Ubuntu
Linux kernel vulnerabilities2021-02-25
Ubuntu
Linux kernel vulnerabilities2021-02-25
BSD
FreeBSD-SA-21:02.xenoom: Xen guests can triger backend Out Of Memory2021-01-29
CVE-2020-29568 — Debian Linux vulnerability | cvebase