An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service     (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE:
    this issue is caused by an incorrect fix for CVE-2020-27671. (CVE-2020-29040)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service
    (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE:
    this issue is caused by an incorrect fix for CVE-2020-27671. (CVE-2020-29040)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of
    service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to
    a use-after-free involving 2MiB and 1GiB superpages. (CVE-2020-27672)

  - An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service
    (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry
    can be half-updated. (CVE-2020-27670)

  - An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of
    service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page
    IOMMU TLB flushes is mishandled. (CVE-2020-27671)

  - An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges
    by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an
    INVLPG-like attack technique. (CVE-2020-27674)

ID	Name	Product	Family	Severity
251124	Linux Distros Unpatched Vulnerability : CVE-2020-29040	Nessus	Misc.	high
424661	Alpine: multiple xen packages: security update to 4.14.0-r3	Tenable Cloud Security	Alpine Linux Local Security Checks	high
424661	Alpine: multiple xen packages: security update to 4.14.0-r3	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
407776	Alpine: xen: security update to 4.13.2-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	high
407776	Alpine: xen: security update to 4.13.2-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
407765	Alpine: xen: security update to 4.12.4-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
407765	Alpine: xen: security update to 4.12.4-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2020-29040

high

Tenable Plugins

high

high

high

high

high

high

high