Description
XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit. This causes XAPI to be unable to accept new requests for other (trusted) clients, and blocks XAPI from carrying out any tasks that require the opening of file descriptors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Xapi | Xapi | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | xen | 4.17.0-r0 | — |
| Alpine v3.23 | xen | 4.17.0-r0 | — |
| Alpine v3.22 | xen | 4.17.0-r0 | — |
| Alpine v3.21 | xen | 4.17.0-r0 | — |
| Alpine v3.20 | xen | 4.17.0-r0 | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | xen | 4.17.0-r0 | — |
| Alpine v3.18 | xen | 4.17.0-r0 | — |
| Alpine v3.15 | xen | 4.15.4-r0 | — |
| Alpine v3.14 | xen | 4.15.4-r0 | — |
Advisories 2
- WID-SEC-2022-1680 Xen / Citrix Hypervisor: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Feb 4, 2024
- WID-SEC-2022-1939 Xen: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 4, 2024