VDB
DEBIAN-CVE-2020-27674
DEBIAN-CVE-2020-27674
PUBLISHED
CVSS 5.300000190734863 MEDIUM
An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an INVLPG-like attack technique.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | xen | 0, 0, 0 |
| Debian:13 | xen | 0, 0, 0 |
| Debian:11 | xen | 0, 0, 0 |
| Debian:12 | xen | 0, 0, 0 |
Timeline
- Oct 22, 2020 CVE Published
- Apr 28, 2026 CVE Updated