CVE-2021-28701

🗓️ 08 Sep 2021 13:02:28Reported by XENType

Race condition in XENMAPSPACE_grant_table handling allows guests to retain access to freed memory pages

Reporter	Title	Published	Views	Family All 87
ATTACKERKB	CVE-2021-28701	8 Sep 202114:15	–	attackerkb
AlpineLinux	CVE-2021-28701	8 Sep 202114:15	–	alpinelinux
BDU FSTEC	The vulnerability of the XENMAPSPACE_grant_table function in Xen hypervisors allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.	1 Apr 202200:00	–	bdu_fstec
CNNVD	Xen 竞争条件问题漏洞	8 Sep 202100:00	–	cnnvd
Citrix	Citrix Hypervisor Security Update	7 Sep 202110:10	–	citrix
CVE	CVE-2021-28701	8 Sep 202113:02	–	cve
Debian	[SECURITY] [DSA 4977-1] xen security update	20 Sep 202119:08	–	debian
Debian CVE	CVE-2021-28701	8 Sep 202113:02	–	debiancve
Tenable Nessus	Debian DSA-4977-1 : xen - security update	21 Sep 202100:00	–	nessus
Tenable Nessus	GLSA-202208-23 : Xen: Multiple Vulnerabilities	15 Aug 202200:00	–	nessus

[
  {
    "product": "xen",
    "vendor": "Xen",
    "versions": [
      {
        "lessThan": "4.12",
        "status": "unknown",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.15.x",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "next of xen-unstable",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "xen",
    "vendor": "Xen",
    "versions": [
      {
        "status": "affected",
        "version": "4.11.x"
      }
    ]
  },
  {
    "product": "xen",
    "vendor": "Xen",
    "versions": [
      {
        "lessThan": "4.12",
        "status": "unknown",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.12.x",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "unaffected",
        "version": "next of 4.14.x",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
xenbits	www.xenbits.xen.org/xsa/advisory-384.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L4MI3MQAPGILCLXBGQWPZHGE3ALSO4ZU/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3HEHUIUWSSMCQGQY3GWX4J2SZGYP5W2Z/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CEHZLIR5DFYYQBH55AERWHLO54OFU42C/
debian	www.debian.org/security/2021/dsa-4977
openwall	www.openwall.com/lists/oss-security/2021/09/08/2
xenbits	www.xenbits.xenproject.org/xsa/advisory-384.txt
security	www.security.gentoo.org/glsa/202208-23

14 Aug 2022 20:11Current

7.9High risk

Vulners AI Score7.9

EPSS0.00257