CVE-2020-29568

An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbounded, a guest may be able to trigger an OOM in the backend. All systems with a FreeBSD, Linux, or NetBSD (any version) dom0 are vulnerable.

• CWE-770

• https://lists.debian.org/debian-lts-announce/2021/02/msg00018.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00010.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202107-30Third Party Advisory
• https://www.debian.org/security/2021/dsa-4843Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-349.htmlPatch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2021/02/msg00018.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00010.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202107-30Third Party Advisory
• https://www.debian.org/security/2021/dsa-4843Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-349.htmlPatch, Vendor Advisory

Published

Dec 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-29562The iconv function in the GNU C Library (aka glibc or libc6)…4.8
• CVE-2020-29563An issue was discovered on Western Digital My Cloud OS 5 dev…9.8
• CVE-2020-29564The official Consul Docker images 0.7.1 through 1.4.2 contai…9.8
• CVE-2020-29565An issue was discovered in OpenStack Horizon before 15.3.2, …6.1
• CVE-2020-29566An issue was discovered in Xen through 4.14.x. When they req…5.5
• CVE-2020-29567An issue was discovered in Xen 4.14.x. When moving IRQs betw…6.2
• CVE-2020-29569An issue was discovered in the Linux kernel through 5.10.1, …8.8
• CVE-2020-29570An issue was discovered in Xen through 4.14.x. Recording of …6.2
• CVE-2020-29571An issue was discovered in Xen through 4.14.x. A bounds chec…6.2
• CVE-2020-29572app/View/Elements/genericElements/SingleViews/Fields/generic…6.1
• CVE-2020-29573sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or l…7.5
• CVE-2020-29574An SQL injection vulnerability in the WebAdmin of Cyberoam O…9.8