VDB
ALPINE-CVE-2020-27674
ALPINE-CVE-2020-27674
PUBLISHED
CVSS 5.300000190734863 MEDIUM
An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an INVLPG-like attack technique.
Risk Scores
CVSS v3.1
5.300000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.15 | xen | 4.9.1-r3, 4.9.1-r2, 4.9.1-r1 |
| Alpine:v3.18 | xen | 4.9.1-r3, 4.9.1-r2, 4.9.1-r1 |
| Alpine:v3.10 | xen | 4.0.1-r0, 4.0.1-r1, 4.0.1-r2 |
| Alpine:v3.22 | xen | 0, 4.0.1-r1, 4.0.1-r2 |
| Alpine:v3.14 | xen | 4.9.1-r3, 4.0.1-r0, 4.0.1-r1 |
| Alpine:v3.17 | xen | 0, 4.9.1-r3, 4.9.1-r2 |
| Alpine:v3.11 | xen | 4.4.1-r5, 0, 4.0.1-r0 |
| Alpine:v3.21 | xen | 4.2.2-r4, 4.2.2-r2, 4.2.2-r11 |
| Alpine:v3.13 | xen | 4.12.0-r1, 4.0.1-r3, 0 |
| Alpine:v3.20 | xen | 4.0.1-r3, 0, 4.0.1-r1 |
| Alpine:v3.16 | xen | 4.9.1-r3, 4.9.1-r2, 4.9.1-r1 |
| Alpine:v3.12 | xen | 4.9.1-r3, 0, 4.0.1-r0 |
| Alpine:v3.23 | xen | 4.10.0-r0, 0, 4.0.1-r0 |
| Alpine:v3.19 | xen | 4.3.0-r2, 4.13.1-r0, 4.13.0-r3 |
Timeline
- Oct 22, 2020 CVE Published
- Dec 3, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch