{
  "cveId": "CVE-2020-25595",
  "url": "https://patchblox.com/security/cve/CVE-2020-25595",
  "summary": "CVE-2020-25595 is fixed in 22 products on 1 platform, first by libxencall1 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3, released September 23, 2020. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libxencall1: An issue was discovered in Xen through 4.14.x",
  "description": "An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen\u0027s MSI handling have been identified that act on unsanitized values read back from device hardware registers. While devices strictly compliant with PCI specifications shouldn\u0027t be able to affect these registers, experience shows that it\u0027s very common for devices to have out-of-spec \u0022backdoor\u0022 operations that can affect the result of these reads. A not fully trusted guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. Privilege escalation and information leaks cannot be excluded. All versions of Xen supporting PCI passthrough are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only guests with passed through PCI devices may be able to leverage the vulnerability. Only systems passing through devices with out-of-spec (\u0022backdoor\u0022) functionality can cause issues. Experience shows that such out-of-spec functionality is common; unless you have reason to believe that your device does not have such functionality, it\u0027s better to assume that it does.",
  "published": "2020-09-23T14:15:00Z",
  "severity": "Medium",
  "epss": 0.00373,
  "epssPercentile": 0.31475,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libxencall1",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "libxencall1 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libxencall1-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libxendevicemodel1",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "libxendevicemodel1 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libxendevicemodel1-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libxenevtchn1",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "libxenevtchn1 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libxenevtchn1-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libxenforeignmemory1",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "libxenforeignmemory1 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libxenforeignmemory1-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libxengnttab1",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "libxengnttab1 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libxengnttab1-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libxenmisc4.11",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "libxenmisc4.11 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libxenmisc4.11-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libxenstore3.0",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "libxenstore3.0 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libxenstore3.0-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libxentoolcore1",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "libxentoolcore1 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libxentoolcore1-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libxentoollog1",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "libxentoollog1 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libxentoollog1-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xen-hypervisor-4.11-amd64",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xen-hypervisor-4.11-amd64 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xen-hypervisor-4.11-amd64-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xen-hypervisor-4.11-arm64",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xen-hypervisor-4.11-arm64 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xen-hypervisor-4.11-arm64-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xen-hypervisor-4.11-armhf",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xen-hypervisor-4.11-armhf 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xen-hypervisor-4.11-armhf-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xen-hypervisor-4.9-amd64",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xen-hypervisor-4.9-amd64 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xen-hypervisor-4.9-amd64-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xen-hypervisor-4.9-arm64",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xen-hypervisor-4.9-arm64 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xen-hypervisor-4.9-arm64-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xen-hypervisor-4.9-armhf",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xen-hypervisor-4.9-armhf 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xen-hypervisor-4.9-armhf-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xen-hypervisor-common",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xen-hypervisor-common 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xen-hypervisor-common-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xen-system-amd64",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xen-system-amd64 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xen-system-amd64-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xen-system-arm64",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xen-system-arm64 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xen-system-arm64-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xen-system-armhf",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xen-system-armhf 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xen-system-armhf-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xen-utils-4.11",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xen-utils-4.11 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xen-utils-4.11-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xen-utils-common",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xen-utils-common 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xen-utils-common-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "xenstore-utils",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "fix": "xenstore-utils 4.11.3\u002B24-g14b62ab3e5-1ubuntu2.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-xenstore-utils-4.11.3-24-g14b62ab3e5-1ubuntu2.3",
      "released": "2020-09-23T15:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}