Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Pratyush Yadav

#32654of 53,633
7.8Total CVSS
Vulnerabilities · 1
PT-2024-1299
7.8
2024-01-08
Xen · Xen · CVE-2023-46838
**Name of the Vulnerable Software and Affected Versions** Xen (affected versions not specified) **Description** The issue is related to the processing of transmit requests in Xen's virtual network protocol, which can consist of multiple parts. When all parts of a particular request are of zero length, it can lead to a de-reference of NULL in core networking code. This can potentially cause a denial of service. The `xenvif get requests()` function in the `drivers/net/xen-netback/netback.c` module is associated with this issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.