CVE-2020-11740
- State
- Published
- Severity
- Not scored
- Published
- Apr 14, 2020
- Updated
- Aug 4, 2024
- Reserved
- Apr 14, 2020
Description
An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. These buffers were not scrubbed.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://xenbits.xen.org/xsa/advisory-313.html
- http://xenbits.xen.org/xsa/advisory-313.html
- [oss-security] 20200414 Xen Security Advisory 313 v3 (CVE-2020-11740,CVE-2020-11741) - multiple xenoprof issuesmailing-list
- FEDORA-2020-440457afe4vendor-advisory
- FEDORA-2020-295ed0b1e0vendor-advisory
- openSUSE-SU-2020:0599vendor-advisory
- FEDORA-2020-cbc3149753vendor-advisory
- GLSA-202005-08vendor-advisory
- DSA-4723vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.