CVE-2020-27671
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a...
7.8 HighFix available
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.34%Down 2.0 points since Apr 14, 2021
What each source reports
NVD Score used
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.
- Record
CVE-2020-27671- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.
- Record
CVE-2020-27671- Updated
- 2026-11-02
EUVDEUVD-2020-20175 No score
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.
- Record
EUVD-2020-20175- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mpp4-4x92-f6p7
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a...
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.
- Record
GHSA-mpp4-4x92-f6p7- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-269
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-27671
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.
- Record
ALPINE-CVE-2020-27671- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.
- Record
CVE-2020-27671- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Show 19 moreShow less
OSVDEBIAN-CVE-2020-27671
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.
- Record
DEBIAN-CVE-2020-27671- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-27671
An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.
- Record
UBUNTU-CVE-2020-27671- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1783-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)
- bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345)
- bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346)
- bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347)
This update was imported from the SUSE:SLE-15-SP2:Update update project.
- Record
openSUSE-SU-2020:1783-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1844-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)
- bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345)
- bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346)
- bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347)
This update was imported from the SUSE:SLE-15-SP1:Update update project.
- Record
openSUSE-SU-2020:1844-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:2162-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355)
This update was imported from the SUSE:SLE-15-SP2:Update update project.
- Record
openSUSE-SU-2020:2162-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:2192-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355)
This update was imported from the SUSE:SLE-15-SP1:Update update project.
- Record
openSUSE-SU-2020:2192-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11520-1 No score
xen-4.15.1_01-1.2 on GA media
These are all security issues fixed in the xen-4.15.1_01-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11520-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:14557-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1178963 - stack corruption from XSA-346 change (XSA-355)
- bsc#1178935 - CVE-2020-25723: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c
- bsc#1177409 - CVE-2020-27674: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)
- bsc#1177412 - CVE-2020-27672: Race condition in Xen mapping code (XSA-345)
- bsc#1177413 - CVE-2020-27671: undue deferral of IOMMU TLB flushes (XSA-346)
- bsc#1177414 - CVE-2020-27670: unsafe AMD IOMMU page table updates (XSA-347)
- bsc#1178591 - CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351
- Record
SUSE-SU-2020:14557-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3049-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)
- bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345)
- bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346)
- bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347)
- Record
SUSE-SU-2020:3049-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3050-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)
- bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345)
- bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346)
- bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347)
- Record
SUSE-SU-2020:3050-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3051-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)
- bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345)
- bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346)
- bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347)
- Record
SUSE-SU-2020:3051-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3052-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)
- bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345)
- bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346)
- bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347)
- Record
SUSE-SU-2020:3052-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3088-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)
- bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345)
- bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346)
- bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347)
- Record
SUSE-SU-2020:3088-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3611-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355)
- Record
SUSE-SU-2020:3611-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3615-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355)
- Record
SUSE-SU-2020:3615-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3627-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355)
- Record
SUSE-SU-2020:3627-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3631-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1178963 - stack corruption from XSA-346 change (XSA-355)
- bsc#1177409 - CVE-2020-27674: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)
- bsc#1177412 - CVE-2020-27672: Race condition in Xen mapping code (XSA-345)
- bsc#1177413 - CVE-2020-27671: undue deferral of IOMMU TLB flushes (XSA-346)
- bsc#1177414 - CVE-2020-27670: unsafe AMD IOMMU page table updates (XSA-347)
- bsc#1178591 - CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351
- Record
SUSE-SU-2020:3631-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3653-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355)
- Record
SUSE-SU-2020:3653-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3742-1 No score
Security update for xen
This update for xen fixes the following issues:
- bsc#1178963 - stack corruption from XSA-346 change (XSA-355)
- bsc#1177409 - CVE-2020-27674: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)
- bsc#1177412 - CVE-2020-27672: Race condition in Xen mapping code (XSA-345)
- bsc#1177413 - CVE-2020-27671: undue deferral of IOMMU TLB flushes (XSA-346)
- bsc#1177414 - CVE-2020-27670: unsafe AMD IOMMU page table updates (XSA-347)
- bsc#1178591 - CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351
- Record
SUSE-SU-2020:3742-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xenAlpine:v3.10 |
4.2.0 up to 4.12.4-r0 | 4.12.4-r0 |
xenAlpine:v3.11 |
4.2.0 up to 4.13.2-r0 | 4.13.2-r0 |
xenAlpine:v3.12 |
4.2.0 up to 4.13.2-r0 | 4.13.2-r0 |
xenAlpine:v3.13 |
4.2.0 up to 4.14.0-r2 | 4.14.0-r2 |
xenAlpine:v3.14 |
4.2.0 up to 4.14.0-r2 | 4.14.0-r2 |
xenAlpine:v3.15 |
4.2.0 up to 4.14.0-r2 | 4.14.0-r2 |
xenAlpine:v3.16 |
4.2.0 up to 4.14.0-r2 | 4.14.0-r2 |
xenAlpine:v3.17 |
4.2.0 up to 4.14.0-r2 | 4.14.0-r2 |
xenAlpine:v3.18 |
4.2.0 up to 4.14.0-r2 | 4.14.0-r2 |
xenAlpine:v3.19 |
4.2.0 up to 4.14.0-r2 | 4.14.0-r2 |
Show 54 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xenAlpine:v3.20 |
4.2.0 up to 4.14.0-r2 | 4.14.0-r2 |
xenAlpine:v3.21 |
4.2.0 up to 4.14.0-r2 | 4.14.0-r2 |
xenAlpine:v3.22 |
4.2.0 up to 4.14.0-r2 | 4.14.0-r2 |
xenAlpine:v3.23 |
4.2.0 up to 4.14.0-r2 | 4.14.0-r2 |
xenAlpine:v3.24 |
4.2.0 up to 4.14.0-r2 | 4.14.0-r2 |
xenDebian:12 |
before 4.14.0+80-gd101b417b7-1 | 4.14.0+80-gd101b417b7-1 |
xenDebian:13 |
before 4.14.0+80-gd101b417b7-1 | 4.14.0+80-gd101b417b7-1 |
xenDebian:14 |
before 4.14.0+80-gd101b417b7-1 | 4.14.0+80-gd101b417b7-1 |
xenDebian:10 From an advisory covering 5 CVEs |
before 4.11.4+57-g41a822c392-1, plus listed versions 4.11.1+92-g6c33308a8d-24.11.3+24-g14b62ab3e5-14.11.3+24-g14b62ab3e5-1~deb10u14.11.4+24-gddaaccbbab-14.11.4+24-gddaaccbbab-1~deb10u14.11.4+37-g3263f257ca-14.11.4-1 |
4.11.4+57-g41a822c392-1 |
xenSUSE:Linux Enterprise Server 11 SP4-LTSS From an advisory covering 6 CVEs |
before 4.4.4_46-61.58.1 | 4.4.4_46-61.58.1 |
xenSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 4 CVEs |
before 4.13.1_10-3.13.1 | 4.13.1_10-3.13.1 |
xenSUSE:Linux Enterprise Module for Server Applications 15 SP2 From an advisory covering 4 CVEs |
before 4.13.1_10-3.13.1 | 4.13.1_10-3.13.1 |
xenSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 4 CVEs |
before 4.12.3_10-3.27.1 | 4.12.3_10-3.27.1 |
xenSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 4 CVEs |
before 4.12.3_10-3.27.1 | 4.12.3_10-3.27.1 |
xenSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 4 CVEs |
before 4.12.3_10-3.27.1 | 4.12.3_10-3.27.1 |
xenSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 4 CVEs |
before 4.12.3_10-3.31.1 | 4.12.3_10-3.31.1 |
xenSUSE:Linux Enterprise Module for Server Applications 15 SP1 From an advisory covering 4 CVEs |
before 4.12.3_10-3.31.1 | 4.12.3_10-3.31.1 |
xenSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 4 CVEs |
before 4.10.4_18-3.44.1 | 4.10.4_18-3.44.1 |
xenSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 4 CVEs |
before 4.10.4_18-3.44.1 | 4.10.4_18-3.44.1 |
xenSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 4 CVEs |
before 4.10.4_18-3.44.1 | 4.10.4_18-3.44.1 |
xenSUSE:OpenStack Cloud 9 From an advisory covering 4 CVEs |
before 4.11.4_10-2.39.2 | 4.11.4_10-2.39.2 |
xenSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 4 CVEs |
before 4.11.4_10-2.39.2 | 4.11.4_10-2.39.2 |
xenSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 4 CVEs |
before 4.11.4_10-2.39.2 | 4.11.4_10-2.39.2 |
xenSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 4 CVEs |
before 4.11.4_10-2.39.2 | 4.11.4_10-2.39.2 |
xenSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 5 CVEs |
before 4.12.4_04-3.37.1 | 4.12.4_04-3.37.1 |
xenSUSE:Linux Enterprise Module for Server Applications 15 SP1 From an advisory covering 5 CVEs |
before 4.12.4_04-3.37.1 | 4.12.4_04-3.37.1 |
xenSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 5 CVEs |
before 4.13.2_04-3.19.1 | 4.13.2_04-3.19.1 |
xenSUSE:Linux Enterprise Module for Server Applications 15 SP2 From an advisory covering 5 CVEs |
before 4.13.2_04-3.19.1 | 4.13.2_04-3.19.1 |
xenSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 5 CVEs |
before 4.10.4_22-3.50.1 | 4.10.4_22-3.50.1 |
xenSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 5 CVEs |
before 4.10.4_22-3.50.1 | 4.10.4_22-3.50.1 |
xenSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 5 CVEs |
before 4.10.4_22-3.50.1 | 4.10.4_22-3.50.1 |
xenSUSE:HPE Helion OpenStack 8 From an advisory covering 5 CVEs |
before 4.9.4_14-3.77.1 | 4.9.4_14-3.77.1 |
xenSUSE:OpenStack Cloud 8 From an advisory covering 5 CVEs |
before 4.9.4_14-3.77.1 | 4.9.4_14-3.77.1 |
xenSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 5 CVEs |
before 4.9.4_14-3.77.1 | 4.9.4_14-3.77.1 |
xenSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 5 CVEs |
before 4.9.4_14-3.77.1 | 4.9.4_14-3.77.1 |
xenSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 5 CVEs |
before 4.9.4_14-3.77.1 | 4.9.4_14-3.77.1 |
xenSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 5 CVEs |
before 4.9.4_14-3.77.1 | 4.9.4_14-3.77.1 |
xenSUSE:Enterprise Storage 5 From an advisory covering 5 CVEs |
before 4.9.4_14-3.77.1 | 4.9.4_14-3.77.1 |
xenSUSE:OpenStack Cloud 9 From an advisory covering 5 CVEs |
before 4.11.4_14-2.45.1 | 4.11.4_14-2.45.1 |
xenSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 5 CVEs |
before 4.11.4_14-2.45.1 | 4.11.4_14-2.45.1 |
xenSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 5 CVEs |
before 4.11.4_14-2.45.1 | 4.11.4_14-2.45.1 |
xenSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 5 CVEs |
before 4.11.4_14-2.45.1 | 4.11.4_14-2.45.1 |
xenSUSE:OpenStack Cloud 7 From an advisory covering 5 CVEs |
before 4.7.6_12-43.70.1 | 4.7.6_12-43.70.1 |
xenSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 5 CVEs |
before 4.7.6_12-43.70.1 | 4.7.6_12-43.70.1 |
xenSUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 5 CVEs |
before 4.7.6_12-43.70.1 | 4.7.6_12-43.70.1 |
xenSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 5 CVEs |
before 4.7.6_12-43.70.1 | 4.7.6_12-43.70.1 |
xenUbuntu:16.04:LTS |
All versions, plus listed versions 4.5.1-0ubuntu14.5.1-0ubuntu24.6.0-1ubuntu14.6.0-1ubuntu24.6.0-1ubuntu4 Show 7 moreShow less4.6.0-1ubuntu4.14.6.0-1ubuntu4.24.6.0-1ubuntu4.34.6.5-0ubuntu14.6.5-0ubuntu1.14.6.5-0ubuntu1.24.6.5-0ubuntu1.4 |
None known |
xenUbuntu:18.04:LTS |
All versions, plus listed versions 4.9.0-0ubuntu34.9.0-0ubuntu44.9.2-0ubuntu1 |
None known |
xenUbuntu:20.04:LTS |
All versions, plus listed versions 4.9.2-0ubuntu24.9.2-0ubuntu64.9.2-0ubuntu74.11.3+24-g14b62ab3e5-1ubuntu14.11.3+24-g14b62ab3e5-1ubuntu24.11.3+24-g14b62ab3e5-1ubuntu2.24.11.3+24-g14b62ab3e5-1ubuntu2.3 |
None known |
xenopenSUSE:Leap 15.2 From an advisory covering 4 CVEs |
before 4.13.1_10-lp152.2.12.1 | 4.13.1_10-lp152.2.12.1 |
xenopenSUSE:Leap 15.1 From an advisory covering 4 CVEs |
before 4.12.3_10-lp151.2.27.1 | 4.12.3_10-lp151.2.27.1 |
xenopenSUSE:Leap 15.2 From an advisory covering 5 CVEs |
before 4.13.2_04-lp152.2.18.1 | 4.13.2_04-lp152.2.18.1 |
xenopenSUSE:Leap 15.1 From an advisory covering 5 CVEs |
before 4.12.4_04-lp151.2.33.1 | 4.12.4_04-lp151.2.33.1 |
xenopenSUSE:Tumbleweed From an advisory covering 93 CVEs |
before 4.15.1_01-1.2 | 4.15.1_01-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-27671 is a high vulnerability (CVSS 7.8) in Xen, published October 22, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in xen 4.12.4-r0.
References
xenbits.xen.org/xsa/advisory-346.html
lists.opensuse.org/opensuse-security-announce/2020-10/msg00075.html
security.gentoo.org/glsa/202011-06
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XIK57QJOVOPWH6RFRNMGOBCROBCKMDG2
debian.org/security/2020/dsa-4804
Show 126 moreShow less
openwall.com/lists/oss-security/2021/01/19/8
nvd.nist.gov/vuln/detail/CVE-2020-27671
github.com/advisories/GHSA-mpp4-4x92-f6p7
security.alpinelinux.org/vuln/CVE-2020-27671
security-tracker.debian.org/tracker/CVE-2020-27671
suse.com/support/update/announcement/2020/suse-su-202014557-1
bugzilla.suse.com/1177409
ubuntu.com/security/CVE-2020-27671
cve.org/CVERecord?id=CVE-2020-27671