Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-27672

Опубликовано: 22 окт. 2020
Источник: ubuntu
Приоритет: medium
CVSS2: 6.9
CVSS3: 7

Описание

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
devel

not-affected

4.11.4+57-g41a822c392-1
esm-apps/focal

needed

esm-apps/jammy

not-affected

4.11.4+57-g41a822c392-1
esm-apps/noble

not-affected

4.11.4+57-g41a822c392-1
esm-infra-legacy/trusty

DNE

esm-infra/bionic

needed

esm-infra/xenial

needed

focal

ignored

end of standard support, was needed
groovy

ignored

end of life

Показывать по

6.9 Medium

CVSS2

7 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
redhat
больше 5 лет назад

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages.

CVSS3: 7
nvd
больше 5 лет назад

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages.

CVSS3: 7
debian
больше 5 лет назад

An issue was discovered in Xen through 4.14.x allowing x86 guest OS us ...

CVSS3: 7
github
больше 3 лет назад

An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages.

CVSS3: 7
fstec
больше 5 лет назад

Уязвимость гипервизора Xen, вызванная одновременным выполнением с использованием общего ресурса с неправильной синхронизацией («Ситуация гонки»), позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии

6.9 Medium

CVSS2

7 High

CVSS3