PT-2021-4063 · Xen+1 · Xen+1

Olaf Hering · Published 2021-03-05 · Updated 2024-06-15 · CVE-2021-28687

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)

Description The issue is related to the libxl domain suspend state structure in the Xen hypervisor, which does not follow the standard initialization and disposal discipline. This can lead to a crash when a guest initiates a "soft reboot", causing an assert() due to the uninitialized data structure. The impact of this issue depends on the toolstack structure. For xl, the effect is limited to the domain in question hanging in a crashed state, but it can be destroyed by xl destroy. For daemon-based toolstacks like libvirt, this can cause a system-wide denial of service (DoS) by crashing the toolstack, losing the state of in-progress operations, and preventing further administrator operations unless the daemon is configured to restart automatically.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-909

Related Identifiers

BDU:2021-04604

CVE-2021-28687

OPENSUSE-SU-2024:11520-1

SUSE-SU-2021:1023-1

SUSE-SU-2021:1028-1

SUSE-SU-2021:1460-1

SUSE-SU-2021_1028-1

SUSE-SU-2021_1460-1

Affected Products

Suse

Xen

References · 124

• https://osv.dev/vulnerability/SUSE-SU-2021:1023-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28687 · Security Note
• https://xenbits.xenproject.org/xsa/advisory-368.txt · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-28687 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04604 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:1028-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:1460-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2021-28687 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11520-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-28687 · Vendor Advisory
• https://security.gentoo.org/glsa/202107-30 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-28687 · Vendor Advisory
• https://suse.com/security/cve/CVE-2020-11742 · Note
• https://suse.com/security/cve/CVE-2018-18883 · Note
• https://suse.com/security/cve/CVE-2007-1366 · Note