NULL Pointer Dereference Affecting xen-tools package, versions <4.10.4_24-3.53.1


Severity

Recommended
0.0
medium
0
10

Based on SUSE Linux Enterprise Server security rating.

Threat Intelligence

EPSS
0.11% (45th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about NULL Pointer Dereference vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-SLES150-XENTOOLS-2693157
  • published14 Apr 2022
  • disclosed22 Dec 2020

Introduced: 22 Dec 2020

CVE-2020-29571  (opens in a new tab)
CWE-476  (opens in a new tab)

How to fix?

Upgrade SLES:15.0 xen-tools to version 4.10.4_24-3.53.1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream xen-tools package and not the xen-tools package as distributed by SLES. See How to fix? for SLES:15.0 relevant fixed versions and status.

An issue was discovered in Xen through 4.14.x. A bounds check common to most operation time functions specific to FIFO event channels depends on the CPU observing consistent state. While the producer side uses appropriately ordered writes, the consumer side isn't protected against re-ordered reads, and may hence end up de-referencing a NULL pointer. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. Only Arm systems may be vulnerable. Whether a system is vulnerable depends on the specific CPU. x86 systems are not vulnerable.

CVSS Scores

version 3.1