PT-2022-7323 · Xenstore+1 · Xenstore+1

Jürgen Groß · Published 2022-11-01 · Updated 2024-02-04 · CVE-2022-42323

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Xenstore versions prior to the fix of XSA-322

Description The issue allows cooperating guests to create an arbitrary number of Xenstore nodes. This is possible when one domain lets another write into its local Xenstore tree, creating many nodes and then rebooting. The created nodes become owned by Dom0, which has no limit on the number of nodes due to Xenstore quota. This can lead to a denial of service.

Recommendations As a temporary workaround, consider restricting the ability of domains to write into each other's local Xenstore trees until a patch is available. Restrict access to the Xenstore node creation functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2024-03579

CVE-2022-42323

DSA-5272-1

OPENSUSE-SU-2022_3947-1

OPENSUSE-SU-2022_4007-1

SUSE-SU-2022:3925-1

SUSE-SU-2022:3928-1

SUSE-SU-2022:3947-1

SUSE-SU-2022:3960-1

SUSE-SU-2022:3971-1

SUSE-SU-2022:4007-1

SUSE-SU-2022:4051-1

SUSE-SU-2022:4241-1

SUSE-SU-2022:4332-1

Affected Products

Suse

Xenstore

References · 86

• https://security-tracker.debian.org/tracker/CVE-2022-42323 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-42323 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-42323 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4007-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3960-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3928-1 · Vendor Advisory
• https://debian.org/security/2022/dsa-5272 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4332-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3925-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202402-07 · Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-419.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4051-1 · Vendor Advisory