Xen: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 20

• High 7.1
  CVE-2022-42327

  x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a g…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Medium 6.5
  CVE-2022-42311

  Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Medium 6.5
  CVE-2022-42312

  Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Medium 6.5
  CVE-2022-42313

  Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Medium 6.5
  CVE-2022-42314

  Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Medium 6.5
  CVE-2022-42315

  Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Medium 6.5
  CVE-2022-42316

  Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Medium 6.5
  CVE-2022-42317

  Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Medium 6.5
  CVE-2022-42318

  Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Medium 5.5
  CVE-2022-42326

  Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Unscored —
  CVE-2022-33749

  XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-desc…

  Xapi Xapi xen Alpine
  Oct 11, 2022
• Unscored —
  CVE-2022-42309

  Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a …

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Unscored —
  CVE-2022-42310

  Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an err…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Unscored —
  CVE-2022-42319

  Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might …

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Unscored —
  CVE-2022-42320

  Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid. Whe…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Unscored —
  CVE-2022-42321

  Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Unscored —
  CVE-2022-42322

  Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVE…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Unscored —
  CVE-2022-42323

  Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVE…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Unscored —
  CVE-2022-42324

  Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenb…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022
• Unscored —
  CVE-2022-42325

  Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple…

  Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  Nov 1, 2022

Revision history

1. 2024-02-04 #14

   Neue Updates von Gentoo aufgenommen

2. 2023-03-22 #13

   Neue Updates von ORACLE aufgenommen

3. 2022-12-06 #12

   Neue Updates von SUSE aufgenommen

4. 2022-11-28 #11

   Neue Updates von SUSE aufgenommen

5. 2022-11-17 #10

   Neue Updates von SUSE aufgenommen

6. 2022-11-16 #9

   Neue Updates von SUSE aufgenommen

7. 2022-11-14 #8

   Neue Updates von SUSE aufgenommen

8. 2022-11-13 #7

   Neue Updates von SUSE aufgenommen

9. 2022-11-10 #6

   Neue Updates von SUSE aufgenommen

10. 2022-11-09 #5

    Neue Updates von SUSE aufgenommen

11. 2022-11-08 #4

    Referenz(en) aufgenommen: FEDORA-2022-9F51D13FA3

12. 2022-11-06 #3

    Neue Updates von Debian aufgenommen

13. 2022-11-02 #2

    Referenz(en) aufgenommen: FEDORA-2022-1859E9912E, FEDORA-2022-07438E12DF, FEDORA-2022-674B1243C2

14. 2022-11-01 #1

    Initiale Fassung

References

• Xen Security Advisory vom 2022-11-01
  https://xenbits.xen.org/xsa/advisory-412.html
• Xen Security Advisory vom 2022-11-01
  https://xenbits.xen.org/xsa/advisory-413.html
• Xen Security Advisory vom 2022-11-01
  https://xenbits.xen.org/xsa/advisory-414.html
• Xen Security Advisory vom 2022-11-01
  https://xenbits.xen.org/xsa/advisory-415.html
• Xen Security Advisory vom 2022-11-01
  https://xenbits.xen.org/xsa/advisory-416.html
• Xen Security Advisory vom 2022-11-01
  https://xenbits.xen.org/xsa/advisory-417.html
• Xen Security Advisory vom 2022-11-01
  https://xenbits.xen.org/xsa/advisory-418.html
• Xen Security Advisory vom 2022-11-01
  https://xenbits.xen.org/xsa/advisory-419.html
• Xen Security Advisory vom 2022-11-01
  https://xenbits.xen.org/xsa/advisory-420.html
• Xen Security Advisory vom 2022-11-01
  https://xenbits.xen.org/xsa/advisory-421.html
• Citrix Hypervisor Security Bulletin
  https://support.citrix.com/article/CTX472851/citrix-hypervisor-security-bulletin-for-cve202242316-cve202242317-cve202242318
• Xen Security Advisory vom 2022-11-01
  https://xenbits.xen.org/xsa/advisory-326.html
• Debian Security Advisory DSA-5272 vom 2022-11-06
  https://lists.debian.org/debian-security-announce/2022/msg00242.html
• SUSE Security Update SUSE-SU-2022:3925-1 vom 2022-11-09
  https://lists.suse.com/pipermail/sle-security-updates/2022-November/012859.html
• SUSE Security Update SUSE-SU-2022:3928-1 vom 2022-11-10
  https://lists.suse.com/pipermail/sle-security-updates/2022-November/012866.html
• SUSE Security Update SUSE-SU-2022:3947-1 vom 2022-11-11
  https://lists.suse.com/pipermail/sle-security-updates/2022-November/012906.html
• SUSE Security Update SUSE-SU-2022:3960-1 vom 2022-11-11
  https://lists.suse.com/pipermail/sle-security-updates/2022-November/012903.html
• SUSE Security Update SUSE-SU-2022:3971-1 vom 2022-11-14
  https://lists.suse.com/pipermail/sle-security-updates/2022-November/012910.html
• SUSE Security Update SUSE-SU-2022:4007-1 vom 2022-11-16
  https://lists.suse.com/pipermail/sle-security-updates/2022-November/012939.html
• SUSE Security Update SUSE-SU-2022:4051-1 vom 2022-11-17
  https://lists.suse.com/pipermail/sle-security-updates/2022-November/012964.html
• SUSE Security Update SUSE-SU-2022:4241-1 vom 2022-11-28
  https://lists.suse.com/pipermail/sle-security-updates/2022-November/013122.html
• SUSE Security Update SUSE-SU-2022:4332-1 vom 2022-12-06
  https://lists.suse.com/pipermail/sle-security-updates/2022-December/013191.html
• ORACLE OVMSA-2023-0005 vom 2023-03-22
  https://oss.oracle.com/pipermail/oraclevm-errata/2023-March/001071.html
• Gentoo Linux Security Advisory GLSA-202402-07 vom 2024-02-04
  https://security.gentoo.org/glsa/202402-07