CVE-2020-29568

An issue was discovered in Xen through 4.14.x

published December 15, 2020

CVSS
—
EPSS
0%
Percentile
29.0
In the wild
Unconfirmed
What it is

An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OOM in the backend. All systems with a FreeBSD, Linux, or NetBSD (any version) dom0 are vulnerable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.0th percentile
Published
2020-12-15T16:52Z
EPSS history
Timeline
  • 15 DEC 16:52Z
    An issue was discovered in Xen through 4.14.x
    cvelistv5