CVE-2020-11742

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOP_copy. Grant table operations are expected to return 0 for success, and a negative number for errors. The fix for CVE-2017-12135 introduced a path through grant copy handling where success may be returned to the caller without any action taken. In particular, the status fields of individual operations are left uninitialised, and may result in errant behaviour in the caller of GNTTABOP_copy. A buggy or malicious guest can construct its grant table in such a way that, when a backend domain tries to copy a grant, it hits the incorrect exit path. This returns success to the caller without doing anything, which may cause crashes or other incorrect behaviour.

• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html
• http://www.openwall.com/lists/oss-security/2020/04/14/4Mitigation, Patch, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-318.htmlPatch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5M2XRNCHOGGTJQBZQJ7DCV6ZNAKN3LE2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVTP4OYHCTRU3ONFJOFJQVNDFB25KLLG/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YMAW7D2MP6RE4BFI5BZWOBBWGY3VSOFN/
• https://security.gentoo.org/glsa/202005-08
• https://www.debian.org/security/2020/dsa-4723
• https://xenbits.xen.org/xsa/advisory-318.htmlPatch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00006.html
• http://www.openwall.com/lists/oss-security/2020/04/14/4Mitigation, Patch, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-318.htmlPatch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5M2XRNCHOGGTJQBZQJ7DCV6ZNAKN3LE2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVTP4OYHCTRU3ONFJOFJQVNDFB25KLLG/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YMAW7D2MP6RE4BFI5BZWOBBWGY3VSOFN/
• https://security.gentoo.org/glsa/202005-08
• https://www.debian.org/security/2020/dsa-4723
• https://xenbits.xen.org/xsa/advisory-318.htmlPatch, Vendor Advisory

Published

Apr 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11737A cross-site scripting (XSS) vulnerability in Web Client in …6.1
• CVE-2020-11738The Snap Creek Duplicator plugin before 1.3.28 for WordPress…7.5
• CVE-2020-11739An issue was discovered in Xen through 4.13.x, allowing gues…7.8
• CVE-2020-1174A remote code execution vulnerability exists when the Window…7.8
• CVE-2020-11740An issue was discovered in xenoprof in Xen through 4.13.x, a…5.5
• CVE-2020-11741An issue was discovered in xenoprof in Xen through 4.13.x, a…8.8
• CVE-2020-11743An issue was discovered in Xen through 4.13.x, allowing gues…5.5
• CVE-2020-11747Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-11749Pandora FMS 7.0 NG <= 746 suffers from Multiple XSS vulnerab…9
• CVE-2020-1175A remote code execution vulnerability exists when the Window…7.8
• CVE-2020-11753An issue was discovered in Sonatype Nexus Repository Manager…8.8
• CVE-2020-11758An issue was discovered in OpenEXR before 2.4.1. There is an…5.5