Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2022-42319
HistoryNov 01, 2022 - 1:15 p.m.

CVE-2022-42319

2022-11-0113:15:00
Alpine Linux Development Team
security.alpinelinux.org
28
xenstore
memory allocation
vulnerability
dos
unix

EPSS

0

Percentile

14.2%

Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quite large amounts of memory temporarily. This memory is freed only after the request has been finished completely. A request is regarded to be finished only after the guest has read the response message of the request from the ring page. Thus a guest not reading the response can cause xenstored to not free the temporary memory. This can result in memory shortages causing Denial of Service (DoS) of xenstored.

OSVersionArchitecturePackageVersionFilename
Alpine3.16-mainnoarchxen= 4.16.2-r0UNKNOWN
Alpine3.13-mainnoarchxen= 4.14.5-r7UNKNOWN
Alpine3.17-mainnoarchxen= 4.16.2-r2UNKNOWN