CVE-2020-15687 - CVE House
Back to Database
Status published High CVE-2020-15687

Missing access control restrictions in the Hypervisor component of the...

Vulnerability Description

Missing access control restrictions in the Hypervisor component of the ACRN Project (v2.0 and v1.6.1) allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/de-assign Hypercalls via crafted ioctls and payloads. This attack results in a corrupt state and Denial of Service (DoS) for previously assigned PCIe devices to the Service VM at runtime.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-15687

Credits & Attribution

No credits recorded in the NVD database.

References

More from linuxfoundation

View All →
CVE-2022-46770
qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows...
Unknown 0
CVE-2022-46463
An access control issue in Harbor v1.X.X to v2.5.3 allows...
Unknown 0
CVE-2022-45932
A SQL injection issue was discovered in AAA in OpenDaylight...
Unknown 0
CVE-2022-45931
A SQL injection issue was discovered in AAA in OpenDaylight...
Unknown 0
CVE-2022-45930
A SQL injection issue was discovered in AAA in OpenDaylight...
Unknown 0

Affected Vendor

linuxfoundation

View all reports →

Affected Software

acrn
Vulnerable Versions:
1.6.1, 2.0

Timeline

Official Publish: August 31st, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.