Vulnerabilities > CVE-2020-29485 - Memory Leak vulnerability in multiple products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

NVD

Published: 2020-12-15

Updated: 2023-11-07

Summary

An issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES request, not all tracking information is freed. A guest can cause unbounded memory usage in oxenstored. This can lead to a system-wide DoS. Only systems using the Ocaml Xenstored implementation are vulnerable. Systems using the C Xenstored implementation are not vulnerable.

Vulnerable Configurations

Part	Description	Count
OS	Xen XEN XEN 4.6.0 XEN XEN 4.6.1 XEN XEN 4.6.2 XEN XEN 4.6.3 XEN XEN 4.6.4 XEN XEN 4.6.5 XEN XEN 4.6.6 XEN XEN 4.7.0 XEN XEN 4.7.1 XEN XEN 4.7.2 XEN XEN 4.7.3 XEN XEN 4.7.4 XEN XEN 4.7.5 XEN XEN 4.7.6 XEN XEN 4.8.0 XEN XEN 4.8.1 XEN XEN 4.8.2 XEN XEN 4.8.3 XEN XEN 4.8.4 XEN XEN 4.8.5 XEN XEN 4.9.0 XEN XEN 4.9.1 XEN XEN 4.9.2 XEN XEN 4.9.3 XEN XEN 4.9.4 XEN XEN 4.10.0 XEN XEN 4.10.1 XEN XEN 4.10.2 XEN XEN 4.10.3 XEN XEN 4.10.4 XEN XEN 4.11.0 XEN XEN 4.11.1 XEN XEN 4.11.2 XEN XEN 4.11.3 XEN XEN 4.11.4 XEN XEN 4.12.0 XEN XEN 4.12.1 XEN XEN 4.12.2 XEN XEN 4.12.3 XEN XEN 4.12.4 XEN XEN 4.13.0 XEN XEN 4.13.1 XEN XEN 4.13.2 XEN XEN 4.13.3 XEN XEN 4.13.4 XEN XEN 4.14.0	180
OS	Debian Debian Debian Linux 10.0	1
OS	Fedoraproject Fedoraproject Fedora 32 Fedoraproject Fedora 33	2

Common Weakness Enumeration (CWE)

CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References