CVE-2020-25599

An issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of EVTCHNOP_reset (potentially by a guest on itself) or XEN_DOMCTL_soft_reset (by itself covered by XSA-77) can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses or triggering of bug checks. In particular, x86 PV guests may be able to elevate their privilege to that of the host. Host and guest crashes are also possible, leading to a Denial of Service (DoS). Information leaks cannot be ruled out. All Xen versions from 4.5 onwards are vulnerable. Xen versions 4.4 and earlier are not vulnerable.

• CWE-119
• CWE-362

• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/12/16/5Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/
• https://security.gentoo.org/glsa/202011-06Third Party Advisory
• https://www.debian.org/security/2020/dsa-4769Third Party Advisory
• https://xenbits.xen.org/xsa/advisory-343.htmlPatch, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2020/12/16/5Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/
• https://security.gentoo.org/glsa/202011-06Third Party Advisory
• https://www.debian.org/security/2020/dsa-4769Third Party Advisory
• https://xenbits.xen.org/xsa/advisory-343.htmlPatch, Vendor Advisory

Published

Sep 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25593Acronis True Image through 2021 on macOS allows local privil…6.7
• CVE-2020-25594HashiCorp Vault and Vault Enterprise allowed for enumeration…5.3
• CVE-2020-25595An issue was discovered in Xen through 4.14.x. The PCI passt…7.8
• CVE-2020-25596An issue was discovered in Xen through 4.14.x. x86 PV guest …5.5
• CVE-2020-25597An issue was discovered in Xen through 4.14.x. There is mish…6.5
• CVE-2020-25598An issue was discovered in Xen 4.14.x. There is a missing un…5.5
• CVE-2020-2560Vulnerability in the Siebel UI Framework product of Oracle S…4.7
• CVE-2020-25600An issue was discovered in Xen through 4.14.x. Out of bounds…5.5
• CVE-2020-25601An issue was discovered in Xen through 4.14.x. There is a la…5.5
• CVE-2020-25602An issue was discovered in Xen through 4.14.x. An x86 PV gue…6
• CVE-2020-25603An issue was discovered in Xen through 4.14.x. There are mis…7.8
• CVE-2020-25604An issue was discovered in Xen through 4.14.x. There is a ra…4.7