CVE-2020-29484

CVE-2020-29484 is a denial-of-service vulnerability affecting Xen through version 4.14.x, specifically the C xenstored component, and various distributions including Debian and Fedora. A malicious guest administrator can exploit a flaw in Xenstore watch event handling, where a large tag combined with writes to sub-paths can cause the watch event message payload to exceed 4096 bytes. This leads to an error condition and a NULL pointer dereference, crashing xenstored. The vulnerability has a CVSS score of 6.0 (Medium), indicating a local attack vector with low complexity, requiring high privileges to achieve a high impact on availability by rendering management operations impossible. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.