Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-42321HistoryNov 01, 2022 - 1:15 p.m.
CVE-2022-42321
2022-11-0113:15:11
Debian Security Bug Tracker
security-tracker.debian.org
6
xenstore
recursion
vulnerability
crash
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
EPSS
0
Percentile
14.2%
Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations (e.g. for deleting a sub-tree of Xenstore nodes). With sufficiently deep nesting levels this can result in stack exhaustion on xenstored, leading to a crash of xenstored.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | xen | < 4.16.2+90-g0d39a6d1ae-1 | xen_4.16.2+90-g0d39a6d1ae-1_all.deb |
| Debian | 11 | all | xen | < 4.14.5+86-g1c354767d5-1 | xen_4.14.5+86-g1c354767d5-1_all.deb |
| Debian | 999 | all | xen | < 4.16.2+90-g0d39a6d1ae-1 | xen_4.16.2+90-g0d39a6d1ae-1_all.deb |
| Debian | 13 | all | xen | < 4.16.2+90-g0d39a6d1ae-1 | xen_4.16.2+90-g0d39a6d1ae-1_all.deb |
Related
osv
osv
CVE-2022-42321
2022-11-01 13:15:11
xen - security update
2022-11-06 00:00:00
nvd
nvd
CVE-2022-42321
2022-11-01 13:15:11
ubuntucve
ubuntucve
CVE-2022-42321
2022-11-01 00:00:00
cvelist
cvelist
CVE-2022-42321
2022-11-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-11-23 10:17:50
prion
prion
Stack overflow
2022-11-01 13:15:00
xen
xen
Xenstore: Guests can crash xenstored via exhausting the stack
2022-11-01 10:57:00
cve
cve
CVE-2022-42321
2022-11-01 13:15:11
nessus
nessus
Xenstore: recursive operations causing xenstored stack exhaustion (XSA-418)
2022-11-21 00:00:00
SUSE SLES12 Security Update : xen (SUSE-SU-2022:3960-1)
2022-11-13 00:00:00
SUSE SLES12 Security Update : xen (SUSE-SU-2022:4332-1)
2022-12-07 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:4332-1)
2022-12-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4051-1)
2022-11-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3960-1)
2022-11-14 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: xen-4.16.2-3.fc36
2022-11-09 11:22:40
[SECURITY] Fedora 37 Update: xen-4.16.2-4.fc37
2022-11-24 01:26:09
[SECURITY] Fedora 35 Update: xen-4.15.3-7.fc35
2022-11-17 01:31:32
debian
debian
[SECURITY] [DSA 5272-1] xen security update
2022-11-06 20:00:19
gentoo
gentoo
Xen: Multiple Vulnerabilities
2024-02-04 00:00:00
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
EPSS
0
Percentile
14.2%
Related for DEBIANCVE:CVE-2022-42321