CVE-2021-28706

State: Published
Severity: Not scored
Published: Nov 24, 2021
Updated: Aug 3, 2024
Reserved: Mar 18, 2021

Description

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit. This is a result of a calculation done with 32-bit precision, which may overflow. It would then only be the overflowed (and hence small) number which gets compared against the established upper bound.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
xenXen	4.12.xAffected
xenXen	before 4.12Unknown 4.14.x to before unspecifiedAffected next of 4.15.x to before unspecifiedNot affected
xenXen	xen-unstableAffected
xenXen	4.13.xAffected

References

https://xenbits.xenproject.org/xsa/advisory-385.txt
FEDORA-2021-03645e9807vendor-advisory
DSA-5017vendor-advisory
FEDORA-2021-2b3a2de94fvendor-advisory
GLSA-202402-07vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.