CVE-2021-28700

State: Published
Severity: Not scored
Published: Aug 27, 2021
Updated: Aug 3, 2024
Reserved: Mar 18, 2021

Description

xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen. Unfortunately, the memory limit from them is not set. This allow a domain to allocate memory beyond what an administrator originally configured.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
xenXen	4.12.xAffected
xenXen	before 4.12Unknown 4.13.x to before unspecifiedAffected next of xen-unstable to before unspecifiedNot affected

References

https://xenbits.xenproject.org/xsa/advisory-383.txt
FEDORA-2021-4f129cc0c1vendor-advisory
FEDORA-2021-d68ed12e46vendor-advisory
DSA-4977vendor-advisory
FEDORA-2021-081f9bf5d2vendor-advisory
GLSA-202208-23vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.