PT-2020-17000
CVE-2020-28368
·
Published
2020-11-10
·
Updated
2026-10-31
Description by
CVSS 3.1
4.4
MediumMetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Xen versions through 4.14.x
Description
The issue allows guest OS administrators to obtain sensitive information, such as AES keys from outside the guest, via a side-channel attack on a power/energy monitoring interface, also known as a "Platypus" attack.
Recommendations
To resolve the issue, change the access control for each power/energy monitoring interface in Xen.
Found an issue in the description? Have something to add? Feel free to write us 👾