PT-2020-12818 · Xen+3 · Xen+3

Ilja Van Sprundel · Published 2020-04-14 · Updated 2024-06-15 · CVE-2020-11740

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xen versions through 4.13.x

Description An issue in xenoprof allows guest OS users without active profiling to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. These buffers were not scrubbed.

Recommendations For Xen versions through 4.13.x, consider disabling the xenoprof feature until a patch is available to prevent unprivileged guests from mapping xenoprof buffers and obtaining sensitive information about other guests.

Fix

Weakness Enumeration

CWE-212

Related Identifiers

CVE-2020-11740

DSA-4723-1

OPENSUSE-SU-2020:0599-1

OPENSUSE-SU-2020_0599-1

OPENSUSE-SU-2024:11520-1

SUSE-SU-2020:1124-1

SUSE-SU-2020:1138-1

SUSE-SU-2020:1139-1

SUSE-SU-2020:14444-1

SUSE-SU-2020:14448-1

SUSE-SU-2020:1630-1

SUSE-SU-2020:1634-1

SUSE-SU-2020:2234-1

SUSE-SU-2020_1630-1

SUSE-SU-2020_1634-1

USN-5617-1

Affected Products

Linuxmint

Suse

Ubuntu

Xen

References · 197

• https://ubuntu.com/security/CVE-2020-25602 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5617-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-11740 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1138-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25596 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YMAW7D2MP6RE4BFI5BZWOBBWGY3VSOFN · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11520-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1124-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5M2XRNCHOGGTJQBZQJ7DCV6ZNAKN3LE2 · Vendor Advisory
• https://xenbits.xen.org/xsa/advisory-313.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-0543 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11743 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-11740 · Security Note
• https://ubuntu.com/security/CVE-2020-25604 · Vendor Advisory