CVE-2020-28368

Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a…

published November 10, 2020

CVSS
—
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a "Platypus" attack. NOTE: there is only one logically independent fix: to change the access control for each such interface in Xen.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00398 · 32.8th percentile
Published
2020-11-10T18:17Z
EPSS history
Timeline
  • 10 NOV 18:17Z
    Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a…
    cvelistv5