PT-2021-6824 · Xen+1 · Xen+1

Julien Grall · Published 2021-08-27 · Updated 2022-10-28 · CVE-2021-28700

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)

Description The issue is related to the dom0less feature of the Xen hypervisor, which allows administrators to create multiple unprivileged domains directly from Xen. Unfortunately, the memory limit for these domains is not set, allowing a domain to allocate memory beyond what an administrator originally configured. This can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2022-02249

CVE-2021-28700

DSA-4977-1

OPENSUSE-SU-2021:1236-1

OPENSUSE-SU-2021:2923-1

OPENSUSE-SU-2021_1236-1

OPENSUSE-SU-2021_2923-1

SUSE-SU-2021:2922-1

SUSE-SU-2021:2923-1

SUSE-SU-2021:2924-1

SUSE-SU-2021:2925-1

Affected Products

Suse

Xen

References · 80

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPRVHW4J4ZCPPOHZEWP5MOJT7XDGFFPJ · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28700 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-28700 · Security Note
• https://osv.dev/vulnerability/DSA-4977-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02249 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZCNPSRPGFCQRYE2BI4D4Q4SCE56ANV2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-28700 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2021-28700 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-28700 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:2922-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/FZCNPSRPGFCQRYE2BI4D4Q4SCE56ANV2 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:1236-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:2924-1 · Vendor Advisory
• https://debian.org/security/2021/dsa-4977 · Vendor Advisory
• https://xenbits.xenproject.org/xsa/advisory-383.txt · Vendor Advisory