CVE-2020-29486 Denial of service in n/a
A malicious guest administrator can exhaust xenstored memory or quotas, causing denial of service against specific guests or the entire host.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-29486?
CVE-2020-29486 is a medium-severity denial of service vulnerability in Debian Debian Linux, published on 15 Dec 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered in Xen through 4.14.x. Nodes in xenstore have an ownership. In oxenstored, a owner could give a node away. However, node ownership has quota implications. Any guest can run another guest out of quota, or create an unbounded number of nodes owned by dom0, thus running xenstored out of memory A malicious guest administrator can cause a denial of service against a specific guest or against the whole host. All systems using oxenstored are vulnerable. Building and using oxenstored is the default in the upstream Xen distribution, if the Ocaml compiler is available. Systems using C xenstored are not vulnerable.
Weakness: CWE-770
Which versions are affected by CVE-2020-29486?
It affects 3 products.
Products include Debian Debian Linux, Fedoraproject Fedora, Xen Xen.
How do I fix CVE-2020-29486?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-29486 being exploited?
There is no known exploitation of CVE-2020-29486 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2020-29486, DEBIAN-CVE-2020-29486, GHSA-423g-qv8g-mgcc, UBUNTU-CVE-2020-29486.