Memory leak in Xen - CVE-2020-29485
Published: December 15, 2020 / Updated: December 23, 2020
Vulnerability identifier: #VU49135
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-29485
CWE-ID: CWE-401
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local authenticated user to perform a denial of service (DoS) attack.
An issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES request, not all tracking information is freed. A guest can cause unbounded memory usage in oxenstored. This can lead to a system-wide DoS. Only systems using the Ocaml Xenstored implementation are vulnerable. Systems using the C Xenstored implementation are not vulnerable.
Affected software
Xen
Debian Linux
Fedora
xen (Alpine package)
xen (Debian package)
xen
Debian Linux
Fedora
xen (Alpine package)
xen (Debian package)
xen
How to mitigate CVE-2020-29485
Install update from vendor's website.
xen (Alpine package) - update to 4.14.1-r0
xen (Debian package) - update to 4.11.4+57-g41a822c392-2
xen - addressed in versions 4.13.2-5.fc32, 4.14.0-14.fc33
xen (Debian package) - update to 4.11.4+57-g41a822c392-2
xen - addressed in versions 4.13.2-5.fc32, 4.14.0-14.fc33