All vulnerabilities

Servers and applications

CVE-2020-25595

An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitized values read back from device hardware registers. While devices strictly compliant with PCI specifications shouldn't be able to affect these registers, experience shows that it's very common for devices to have…

Severity
High 7.8
Published
23 Sept 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
XenServers and applications · cpe:o:xen:xen
  • Every version up to 4.14.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-25595
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-25595