CVE-2019-19580

An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion operations, because of an incomplete fix for CVE-2019-18421. XSA-299 addressed several critical issues in restartable PV type change operations. Despite extensive testing and auditing, some corner cases were missed. A malicious PV guest administrator may be able to escalate their privilege to that of the host. All security-supported versions of Xen are vulnerable. Only x86 systems are affected. Arm systems are not affected. Only x86 PV guests can leverage the vulnerability. x86 HVM and PVH guests cannot leverage the vulnerability. Note that these attacks require very precise timing, which may be difficult to exploit in practice.

• CWE-362

• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00011.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/34HBFTYNMQMWIO2GGK7DB6KV4M6R5YPV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D5R73AYE53QA32KTMHUVKCX6E52CIS43/
• https://seclists.org/bugtraq/2020/Jan/21
• https://security.gentoo.org/glsa/202003-56
• https://www.debian.org/security/2020/dsa-4602
• https://xenbits.xen.org/xsa/advisory-310.htmlPatch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00011.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/34HBFTYNMQMWIO2GGK7DB6KV4M6R5YPV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D5R73AYE53QA32KTMHUVKCX6E52CIS43/
• https://seclists.org/bugtraq/2020/Jan/21
• https://security.gentoo.org/glsa/202003-56
• https://www.debian.org/security/2020/dsa-4602
• https://xenbits.xen.org/xsa/advisory-310.htmlPatch, Vendor Advisory

Published

Dec 11, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1957A vulnerability in the web interface of Cisco IoT Field Netw…7.5
• CVE-2019-19576class.upload.php in verot.net class.upload before 1.0.3 and …9.8
• CVE-2019-19577An issue was discovered in Xen through 4.12.x allowing x86 A…7.2
• CVE-2019-19578An issue was discovered in Xen through 4.12.x allowing x86 P…8.8
• CVE-2019-19579An issue was discovered in Xen through 4.12.x allowing attac…6.8
• CVE-2019-1958A vulnerability in the web-based management interface of Cis…8.8
• CVE-2019-19581An issue was discovered in Xen through 4.12.x allowing 32-bi…6.5
• CVE-2019-19582An issue was discovered in Xen through 4.12.x allowing x86 g…6.5
• CVE-2019-19583An issue was discovered in Xen through 4.12.x allowing x86 H…7.5
• CVE-2019-19585An issue was discovered in rConfig 3.9.3. The install script…7.8
• CVE-2019-19587In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs wh…6.1
• CVE-2019-19588The validators package 0.12.2 through 0.12.5 for Python ente…7.5