rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-15467 
The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execution leading to server compromise.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-04T12:48:02.000Z
CVE-2020-15468 
Persian VIP Download Script 1.0 allows SQL Injection via the cart_edit.php active parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T02:16:21.000Z
CVE-2020-15469 
In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-02T19:25:42.000Z
CVE-2020-15470 
ffjpeg through 2020-02-24 has a heap-based buffer overflow in jfif_decode in jfif.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T10:05:49.000Z
CVE-2020-15471 
In nDPI through 3.2, the packet parsing code is vulnerable to a heap-based buffer over-read in ndpi_parse_packet_line_info in lib/ndpi_main.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T10:54:39.000Z
CVE-2020-15472 
In nDPI through 3.2, the H.323 dissector is vulnerable to a heap-based buffer over-read in ndpi_search_h323 in lib/protocols/h323.c, as demonstrated by a payload packet length that is too short.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T10:54:30.000Z
CVE-2020-15473 
In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpi_search_openvpn in lib/protocols/openvpn.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T10:54:17.000Z
CVE-2020-15474 
In nDPI through 3.2, there is a stack overflow in extractRDNSequence in lib/protocols/tls.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T10:54:08.000Z
CVE-2020-15475 
In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T10:53:58.000Z
CVE-2020-15476 
In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T10:53:46.000Z
CVE-2020-15477 
The WebControl in RaspberryTortoise through 2012-10-28 is vulnerable to remote code execution via shell metacharacters in a URI. The file nodejs/raspberryTortoise.js has no validation on the parameter incomingString before passing it to the child_process.exec function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-23T19:46:41.000Z
CVE-2020-15478 
The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T12:04:11.000Z
CVE-2020-15479 
An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The driver's IOCTL request handler attempts to copy the input buffer onto the stack without checking its size and can cause a buffer overflow. This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T20:04:23.000Z
CVE-2020-15480 
An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The kernel driver exposes IOCTL functionality that allows low-privilege users to read and write to arbitrary Model Specific Registers (MSRs). This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-07T20:06:45.000Z
CVE-2020-15481 
An issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008. The kernel driver exposes IOCTL functionality that allows low-privilege users to map arbitrary physical memory into the address space of the calling process. This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys drivers. This issue is fixed in BurnInTest v9.2, PerformanceTest v10.0 Build 1009, OSForensics v8.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-11-13T20:59:15.000Z
CVE-2020-15482 
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T15:44:14.000Z
CVE-2020-15483 
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T15:37:56.000Z
CVE-2020-15484 
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The internal storage of the underlying Linux system stores data in cleartext, without integrity protection against tampering.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T14:41:06.000Z
CVE-2020-15485 
An issue was discovered on Nescomed Multipara Monitor M1000 devices. The onboard Flash memory stores data in cleartext, without integrity protection against tampering.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T19:12:38.000Z
CVE-2020-15486 
An issue was discovered on Dr Trust ECG Pen 2.00.08 devices. Because the Bluetooth LE support is implemented without a requirement for pairing or security, any attacker can access the GATT server of the device and can sniff the data being broadcasted while a measurement is being done. Also, saved data can also be extracted over a Bluetooth connection. In addition, an attacker can launch a man-in-the-middle attack against data integrity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T15:14:59.000Z
CVE-2020-15487 
Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.php file. By modifying the folder GET parameter, it is possible to execute arbitrary SQL statements via a crafted URL. Unauthenticated remote command execution is possible by using this SQL injection to update certain database values, which are then executed by a bizRule eval() function in the yii/framework/web/auth/CAuthManager.php file. Resultant authorization bypass is also possible, by recovering or modifying password hashes and password reset tokens, allowing for administrative privileges to be obtained.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T18:00:44.000Z
CVE-2020-15488 
Re:Desk 2.3 allows insecure file upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-30T18:26:20.000Z
CVE-2020-15489 
An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T20:53:01.000Z
CVE-2020-15490 
An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges. (The set of affected scripts is similar to CVE-2020-12266.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T20:51:36.000Z
CVE-2020-15492 
An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe web application (served on TCP port 85) includes user input into a filesystem access without any further validation. This might allow an unauthenticated attacker to read files on the server via Directory Traversal, or possibly have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-23T19:53:08.000Z
CVE-2020-15495 
Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T14:19:18.000Z
CVE-2020-15496 
Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-15T13:57:08.000Z
CVE-2020-15497 
jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not present in the standard installation of Jalios JCMS
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:N/S:U/UI:N
version: 3.1
Published: 2020-07-17T17:35:05.000Z
CVE-2020-15498 
An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T12:05:26.000Z
CVE-2020-15499 
An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. They allow XSS via spoofed Release Notes on the Firmware Upgrade page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-26T12:03:54.000Z
CVE-2020-15500 
An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-01T22:14:44.000Z
CVE-2020-15501 
Smarter Coffee Maker before 2nd generation allows firmware replacement without authentication or authorization. User interaction is required to press a button. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-07T21:16:37.000Z
CVE-2020-15502 
The DuckDuckGo application through 5.58.0 for Android, and through 7.47.1.0 for iOS, sends hostnames of visited web sites within HTTPS .ico requests to servers in the duckduckgo.com domain, which might make visit data available temporarily at a Potentially Unwanted Endpoint. NOTE: the vendor has stated "the favicon service adheres to our strict privacy policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-02T10:59:20.000Z
CVE-2020-15503 
LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs without validating T.tlength.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-02T00:00:00.000Z
CVE-2020-15504 
A SQL injection vulnerability in the user and admin web interfaces of Sophos XG Firewall v18.0 MR1 and older potentially allows an attacker to run arbitrary code remotely. The fix is built into the re-release of XG Firewall v18 MR-1 (named MR-1-Build396) and the v17.5 MR13 release. All other versions >= 17.0 have received a hotfix.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-10T16:55:15.000Z
CVE-2020-15505 
A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T01:43:52.000Z
CVE-2020-15506 
An authentication bypass vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to bypass authentication mechanisms via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T01:43:13.000Z
CVE-2020-15507 
An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T01:42:44.000Z
CVE-2020-15509 
Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android (as used by nRF Connect and other applications) can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation (e.g., internalCreateBond in BleManagerHandler).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T13:56:47.000Z
CVE-2020-15511 
HashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user registration even when disabled, bypassing SAML enforcement. Fixed in v202007-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-30T13:15:50.000Z
CVE-2020-15513 
The typo3_forum extension before 1.2.1 for TYPO3 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T13:50:17.000Z
CVE-2020-15514 
The jh_captcha extension through 2.1.3, and 3.x through 3.0.2, for TYPO3 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T13:48:05.000Z
CVE-2020-15515 
The turn extension through 0.3.2 for TYPO3 allows Remote Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T15:25:44.000Z
CVE-2020-15516 
The mm_forum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T13:46:10.000Z
CVE-2020-15517 
The ke_search (aka Faceted Search) extension through 2.8.2, and 3.x through 3.1.3, for TYPO3 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T13:44:23.000Z
CVE-2020-15518 
VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-03T10:58:45.000Z
CVE-2020-15521 
Zoho ManageEngine Applications Manager before 14 build 14730 has no protection against jsp/header.jsp Cross-site Scripting (XSS) .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-25T06:05:44.000Z
CVE-2020-15522 
Bouncy Castle BC Java before 1.66, BC C# .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multiple deterministic ECDSA signatures.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-20T11:20:18.000Z
CVE-2020-15523 
In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-04T22:54:00.000Z
CVE-2020-15525 
GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T13:52:54.000Z
CVE-2020-15526 
In Redgate SQL Monitor 7.1.4 through 10.1.6 (inclusive), the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration > Notifications pages to disable certificate checking for alert notifications. These TLS security checks are also ignored during monitoring of VMware machines. This would make SQL Monitor vulnerable to potential man-in-the-middle attacks when sending alert notification emails, posting to Slack or posting to webhooks. The vulnerability is fixed in version 10.1.7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-09T16:40:52.000Z
CVE-2020-15528 
An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity checks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-05T00:31:50.000Z
CVE-2020-15529 
An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operation. The issue exists because of weak file permissions and can be exploited by using opportunistic locks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-05T00:31:38.000Z
CVE-2020-15530 
An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM privileges because some parts of %PROGRAMFILES(X86)%\Steam and/or %COMMONPROGRAMFILES(X86)%\Steam have weak permissions during a critical time window. An attacker can make this time window arbitrarily long by using opportunistic locks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-05T00:31:24.000Z
CVE-2020-15531 
Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air remote code execution vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-19T19:22:58.000Z
CVE-2020-15532 
Silicon Labs Bluetooth Low Energy SDK before 2.13.3 has a buffer overflow via packet data. This is an over-the-air denial of service vulnerability in Bluetooth LE in EFR32 SoCs and associated modules running Bluetooth SDK, supporting Central or Observer roles.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-08-19T18:59:04.000Z
CVE-2020-15533 
In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-10-01T18:44:11.000Z
CVE-2020-15535 
An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-05T15:14:04.000Z
CVE-2020-15536 
An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-05T15:13:56.000Z
CVE-2020-15537 
An issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new title field, a product field to the p/ URI, or the Products Search box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-05T15:13:47.000Z
CVE-2020-15538 
XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-05T15:13:31.000Z
CVE-2020-15539 
SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-05T15:13:19.000Z
CVE-2020-15540 
We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-05T15:13:04.000Z
CVE-2020-15541 
SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-05T21:04:29.000Z
CVE-2020-15542 
SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-05T21:04:05.000Z
CVE-2020-15543 
SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-05T21:04:16.000Z
CVE-2020-15562 
An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. It allows XSS via a crafted HTML e-mail message, as demonstrated by a JavaScript payload in the xmlns (aka XML namespace) attribute of a HEAD element when an SVG element exists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-06T11:26:09.000Z
CVE-2020-15563 
An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests' dirty video RAM tracking code allows such guests to make Xen de-reference a pointer guaranteed to point at unmapped space. A malicious or buggy HVM guest may cause the hypervisor to crash, resulting in Denial of Service (DoS) affecting the entire host. Xen versions from 4.8 onwards are affected. Xen versions 4.7 and earlier are not affected. Only x86 systems are affected. Arm systems are not affected. Only x86 HVM guests using shadow paging can leverage the vulnerability. In addition, there needs to be an entity actively monitoring a guest's video frame buffer (typically for display purposes) in order for such a guest to be able to leverage the vulnerability. x86 PV guests, as well as x86 HVM guests using hardware assisted paging (HAP), cannot leverage the vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-07-07T12:23:55.000Z