CVE-2020-29482

An issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute paths containing a full pathname, or via a relative path, which implicitly includes /local/domain/$DOMID for their own domain id. Management tools must access paths in guests' namespaces, necessarily using absolute paths. oxenstored imposes a pathname limit that is applied solely to the relative or absolute path specified by the client. Therefore, a guest can create paths in its own namespace which are too long for management tools to access. Depending on the toolstack in use, a malicious guest administrator might cause some management tools and debugging operations to fail. For example, a guest administrator can cause "xenstore-ls -r" to fail. However, a guest administrator cannot prevent the host administrator from tearing down the domain. All systems using oxenstored are vulnerable. Building and using oxenstored is the default in the upstream Xen distribution, if the Ocaml compiler is available. Systems using C xenstored are not vulnerable.

• CWE-426

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2C6M6S3CIMEBACH6O7V4H2VDANMO6TVA/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBLV6L6Q24PPQ2CRFXDX4Q76KU776GKI/
• https://www.debian.org/security/2020/dsa-4812Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-323.htmlPatch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2C6M6S3CIMEBACH6O7V4H2VDANMO6TVA/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBLV6L6Q24PPQ2CRFXDX4Q76KU776GKI/
• https://www.debian.org/security/2020/dsa-4812Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-323.htmlPatch, Vendor Advisory

Published

Dec 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-29475nopCommerce Store 4.30 is affected by cross-site scripting (…4.8
• CVE-2020-29477Invision Community 4.5.4 is affected by cross-site scripting…4.8
• CVE-2020-29478CA Service Catalog 17.2 and 17.3 contain a vulnerability in …7.5
• CVE-2020-29479An issue was discovered in Xen through 4.14.x. In the Ocaml …8.8
• CVE-2020-29480An issue was discovered in Xen through 4.14.x. Neither xenst…2.3
• CVE-2020-29481An issue was discovered in Xen through 4.14.x. Access rights…8.8
• CVE-2020-29483An issue was discovered in Xen through 4.14.x. Xenstored and…6.5
• CVE-2020-29484An issue was discovered in Xen through 4.14.x. When a Xensto…6
• CVE-2020-29485An issue was discovered in Xen 4.6 through 4.14.x. When acti…5.5
• CVE-2020-29486An issue was discovered in Xen through 4.14.x. Nodes in xens…6
• CVE-2020-29487An issue was discovered in Xen XAPI before 2020-12-15. Certa…7.5
• CVE-2020-29489Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0…6.7