PT-2022-7334 · Xen+1 · Xenstore+1

Jürgen Groß · Published 2022-11-01 · Updated 2024-02-04 · CVE-2022-42320

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xenstore (affected versions not specified)

Description The issue is related to the Xenstore component of the Xen hypervisor, where guests can gain access to Xenstore nodes of deleted domains due to incomplete cleanup of temporary or auxiliary resources. This can lead to unauthorized access to protected information, privilege escalation, or denial of service. The problem occurs when a new domain is created with the same domid as a previously removed domain, and there is a small time window where the access rights of the past domain are still considered valid. For this to happen, another domain needs to write the node before the newly created domain is introduced to Xenstore by dom0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-459

Related Identifiers

BDU:2024-03590

CVE-2022-42320

DSA-5272-1

OPENSUSE-SU-2022_3947-1

OPENSUSE-SU-2022_4007-1

SUSE-SU-2022:3925-1

SUSE-SU-2022:3928-1

SUSE-SU-2022:3947-1

SUSE-SU-2022:3960-1

SUSE-SU-2022:3971-1

SUSE-SU-2022:4007-1

SUSE-SU-2022:4051-1

SUSE-SU-2022:4241-1

SUSE-SU-2022:4332-1

Affected Products

Suse

Xenstore

References · 87

• https://xenbits.xenproject.org/xsa/advisory-417.txt · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4007-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3960-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3928-1 · Vendor Advisory
• https://debian.org/security/2022/dsa-5272 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-42320 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4332-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-42320 · Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-417.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42320 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:3925-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202402-07 · Vendor Advisory