CVE-2021-28706
High
Description
guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit. This is a result of a calculation done with 32-bit precision, which may overflow. It would then only be the overflowed (and hence small) number which gets compared against the established upper bound.
SeverityHigh
CVSS8.6
Exploit probability—
Product
Xen
PublishedNov 24, 2021
First seenNov 24, 2021
How to fix
Update
- xen xen4.12 or later
Vendor advisories
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7ZGWVVRI4XY2XSTBI3XEMWBXPDVX6OT/
- debian.org/security/2021/dsa-5017
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PXUI4VMD52CH3T7YXAG3J2JW7ZNN3SXF/
- security.gentoo.org/glsa/202402-07
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xen xen | 3.2 ≤ v < 4.12 | 4.12 |
| fedoraproject fedora | 34, 35 | — |
| debian debian_linux | 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.