---
id: 4679
title: "[CVE-2020-27675] Compromising virtualization without attacking the hypervisor"
cve: CVE-2020-27675
source_domain: theori.io
source_url: "https://theori.io/blog/compromising-virtualization-without-attacking-the-hypervisor"
published_at: "2020-10-20T15:00:00Z"
tags: ["linux-kernel", "virtualization", "hypervisor", "xen", "cve-2020-27675", "xsa-331"]
phying_url: "https://phying.com/item/4679"
lang: en
---

# [CVE-2020-27675] Compromising virtualization without attacking the hypervisor

## Summary

CVE-2020-27675 (XSA-331): a DoS and potential out-of-bounds write in Linux's Xen paravirtualization driver — how virtualization platforms can be compromised without attacking the hypervisor directly.

## Intelligence Metadata

- **Sources:** theori.io
- **CVE:** CVE-2020-27675
- **Published:** 2020-10-20T15:00:00Z
- **Original:** https://theori.io/blog/compromising-virtualization-without-attacking-the-hypervisor
- **Phying News:** https://phying.com/item/4679