CVE-2022-42321

MEDIUM

Xenstore - DoS

Title source: llm

Description

Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations (e.g. for deleting a sub-tree of Xenstore nodes). With sufficiently deep nesting levels this can result in stack exhaustion on xenstored, leading to a crash of xenstored.

References (8)

[Patch, Vendor Advisory] http://xenbits.xen.org/xsa/advisory-418.html

[Patch, Vendor Advisory] https://xenbits.xenproject.org/xsa/advisory-418.txt

[Mailing List, Third Party Advisory] http://www.openwall.com/lists/oss-security/2022/11/01/8

[Third Party Advisory] https://www.debian.org/security/2022/dsa-5272

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/

[Third Party Advisory] https://security.gentoo.org/glsa/202402-07

Scores

CVSS v3 6.5

EPSS 0.0003

EPSS Percentile 10.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Details

CWE

CWE-674

Status published

Products (5)

debian/debian_linux 11.0

fedoraproject/fedora 35

fedoraproject/fedora 36

fedoraproject/fedora 37

xen/xen

Published Nov 01, 2022

Tracked Since Feb 18, 2026