Executive Summary

Informations
Name CVE-2020-25596 First vendor Publication 2020-09-23
Vendor Cve Last vendor Modification 2023-11-07

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score 2.1 Attack Range Local
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault, and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel, resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel, Centaur, and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25596

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-74 Failure to Sanitize Data into a Different Plane ('Injection')

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 17
Os 1
Os 3
Os 1
Os 159

Sources (Detail)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Source Url
DEBIAN https://www.debian.org/security/2020/dsa-4769
GENTOO https://security.gentoo.org/glsa/202011-06
MISC https://xenbits.xen.org/xsa/advisory-339.html
SUSE http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
Date Informations
2023-11-07 21:36:38
  • Multiple Updates
2023-08-02 01:53:31
  • Multiple Updates
2022-11-21 17:27:33
  • Multiple Updates
2021-09-02 01:39:29
  • Multiple Updates
2021-05-05 01:39:05
  • Multiple Updates
2021-05-04 13:50:33
  • Multiple Updates
2021-04-22 03:02:03
  • Multiple Updates
2021-03-27 01:34:08
  • Multiple Updates
2021-02-05 01:31:30
  • Multiple Updates
2020-11-11 12:29:36
  • Multiple Updates
2020-10-08 05:22:53
  • Multiple Updates
2020-10-06 00:22:54
  • Multiple Updates
2020-10-04 17:22:52
  • Multiple Updates
2020-10-03 09:22:53
  • Multiple Updates
2020-10-01 12:27:53
  • Multiple Updates
2020-09-27 09:22:48
  • Multiple Updates
2020-09-24 17:22:55
  • Multiple Updates
2020-09-24 05:22:57
  • First insertion