CVE-2021-27379

Katalog CVE

CVSS 7.8 · High EPSS 0,36%

Kerentanan pada xen, debian linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service (host OS crash) or gain privileges. This occurs because a backport missed a flush, and thus IOMMU updates were not always correct. NOTE: this issue exists because of an incomplete fix for CVE-2020-15565.

Rincian

Terbit di NVD

18 Februari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,36% peluang dieksploitasi; lebih tinggi dari 27,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://xenbits.xen.org/xsa/advisory-366.html mitigasi · patch · advisory vendor
• https://xenbits.xen.org/xsa/advisory-366.html patch · advisory vendor
• http://www.openwall.com/lists/oss-security/2021/02/23/1 mailing list · advisory pihak ketiga
• https://www.debian.org/security/2021/dsa-4888 advisory pihak ketiga