CVE-2021-28698

🗓️ 27 Aug 2021 18:32:13Reported by XENType

long running loops in grant table handling can cause CPU starvatio

Reporter	Title	Published	Views	Family All 86
ATTACKERKB	CVE-2021-28698	27 Aug 202119:15	–	attackerkb
AlpineLinux	CVE-2021-28698	27 Aug 202119:15	–	alpinelinux
BDU FSTEC	The vulnerability of Xen hypervisors relates to the execution of a loop with an unavailable exit condition, allowing a malicious actor to cause a service failure.	7 Apr 202200:00	–	bdu_fstec
Circl	CVE-2021-28698	27 Aug 202122:28	–	circl
CNNVD	Xen 安全漏洞	25 Aug 202100:00	–	cnnvd
Citrix	Citrix Hypervisor Security Update	7 Sep 202110:10	–	citrix
CVE	CVE-2021-28698	27 Aug 202118:32	–	cve
Debian	[SECURITY] [DSA 4977-1] xen security update	20 Sep 202119:08	–	debian
Debian CVE	CVE-2021-28698	27 Aug 202118:32	–	debiancve
Tenable Nessus	Debian DSA-4977-1 : xen - security update	21 Sep 202100:00	–	nessus

[
  {
    "product": "xen",
    "vendor": "Xen",
    "versions": [
      {
        "status": "affected",
        "version": "4.14.x"
      }
    ]
  },
  {
    "product": "xen",
    "vendor": "Xen",
    "versions": [
      {
        "lessThan": "4.12",
        "status": "unknown",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.15.x",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "next of xen-unstable",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "xen",
    "vendor": "Xen",
    "versions": [
      {
        "status": "affected",
        "version": "4.13.x"
      }
    ]
  },
  {
    "product": "xen",
    "vendor": "Xen",
    "versions": [
      {
        "status": "affected",
        "version": "4.11.x"
      }
    ]
  },
  {
    "product": "xen",
    "vendor": "Xen",
    "versions": [
      {
        "status": "affected",
        "version": "4.12.x"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2VQCFAPBNGBBAOMJZG6QBREOG5IIDZID/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZCNPSRPGFCQRYE2BI4D4Q4SCE56ANV2/
openwall	www.openwall.com/lists/oss-security/2021/09/01/2
debian	www.debian.org/security/2021/dsa-4977
security	www.security.gentoo.org/glsa/202208-23
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPRVHW4J4ZCPPOHZEWP5MOJT7XDGFFPJ/
xenbits	www.xenbits.xenproject.org/xsa/advisory-380.txt

14 Aug 2022 20:06Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.00337