PT-2020-17000
CVE-2020-28368
·
تاريخ النشر
2020-11-10
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 3.1
4.4
متوسطةالمقاييسAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Xen versions through 4.14.x
Description
The issue allows guest OS administrators to obtain sensitive information, such as AES keys from outside the guest, via a side-channel attack on a power/energy monitoring interface, also known as a "Platypus" attack.
Recommendations
To resolve the issue, change the access control for each power/energy monitoring interface in Xen.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾