All vulnerabilities

Servers and applications

CVE-2020-29040

An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671.

Severity
High 8.8
Published
24 Nov 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
XenServers and applications · cpe:o:xen:xen
  • Every version up to 4.14.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-29040
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-29040