VDB
ALPINE-CVE-2020-27674
ALPINE-CVE-2020-27674
PUBLISHED
CVSS 5.300000190734863 MEDIUM
An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an INVLPG-like attack technique.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.15 | xen | 0, 0, 0 |
| Alpine:v3.18 | xen | 0, 0, 0 |
| Alpine:v3.10 | xen | 4.6.0-r5, 4.6.1-r0, 4.6.1-r1 |
| Alpine:v3.22 | xen | 4.13.1-r3, 4.13.1-r4, 4.13.1-r5 |
| Alpine:v3.14 | xen | 4.9.0-r2, 0, 0 |
| Alpine:v3.17 | xen | 4.9.1-r3, 0, 4.9.1-r2 |
| Alpine:v3.11 | xen | 4.6.1-r1, 0, 0 |
| Alpine:v3.21 | xen | 4.12.0-r1, 0, 4.9.1-r3 |
| Alpine:v3.13 | xen | 0, 4.0.1-r3, 0 |
| Alpine:v3.20 | xen | 4.0.1-r2, 0, 4.0.1-r1 |
| Alpine:v3.16 | xen | 0, 0, 4.9.1-r3 |
| Alpine:v3.12 | xen | 0, 0, 4.0.1-r0 |
| Alpine:v3.24 | xen | 0, 0 |
| Alpine:v3.23 | xen | 4.1.2-r9, 0, 4.0.1-r0 |
| Alpine:v3.19 | xen | 4.3.0-r4, 4.13.1-r0, 4.13.0-r3 |
Timeline
- Oct 22, 2020 CVE Published
- Apr 30, 2026 Distribution Patch
- Jun 15, 2026 CVE Updated