PT-2024-23795 · Xapi · Xapi

Xenserver · Published 2024-07-17 · Updated 2026-01-08 · CVE-2024-31144

Positive Technologies (AI Summary)

CVSS v3.1

3.8

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xapi (affected versions not specified)

Description Xapi contains functionality to backup and restore metadata about Virtual Machines and Storage Repositories (SRs). The metadata itself is stored in a Virtual Disk Image (VDI) inside an SR. A malicious guest can manipulate its disk to appear to be a metadata backup. This can occur because a guest with one disk has a 50% chance of sorting ahead of the legitimate metadata backup, and a guest with two disks has a 75% chance, etc. The metadata VDI is located by searching each VDI, mounting it, and seeing if there is a suitable metadata file present.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-829

Related Identifiers

CVE-2024-31144

MGASA-2025-0270

Affected Products

Xapi

References · 38

• https://advisories.mageia.org/MGASA-2025-0270.html · Security Note
• http://xenbits.xen.org/xsa/advisory-459.html · Vendor Advisory
• https://xenbits.xen.org/xsa/advisory-459.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-31144 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-31144 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-31144 · Security Note
• https://osv.dev/vulnerability/MGASA-2025-0270 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-31144 · Security Note
• https://ubuntu.com/security/CVE-2024-31144 · Vendor Advisory
• https://openwall.com/lists/oss-security/2025/09/09/1 · Note
• https://t.me/cvedetector/18137 · Telegram Post
• http://openwall.com/lists/oss-security/2024/07/16/4 · Note
• https://openwall.com/lists/oss-security/2025/08/28/2 · Note
• https://openwall.com/lists/oss-security/2025/05/12/5 · Note
• https://lists.opensuse.org/archives/list/[e-mail]/message/KEACKX57LEHS2YKZ4PO5DYNOQRGQSDO2 · Note