CVE-2022-42330

Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libxl based Xen toolstack will normally perform a XS_RELEASE Xenstore operation. Due to a bug in xenstored this can result in a crash of xenstored. Any other use of XS_RELEASE will have the same impact.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://security.gentoo.org/glsa/202402-07
https://xenbits.xenproject.org/xsa/advisory-425.txt	Vendor Advisory
http://xenbits.xen.org/xsa/advisory-425.html
https://security.gentoo.org/glsa/202402-07
https://xenbits.xenproject.org/xsa/advisory-425.txt	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:xen:xen:4.17.0:*:*:*:*:*:x64:*

History

21 Nov 2024, 07:24

Type	Values Removed	Values Added
References		() http://xenbits.xen.org/xsa/advisory-425.html -
References	~~() https://security.gentoo.org/glsa/202402-07 -~~	() https://security.gentoo.org/glsa/202402-07 -
References	~~() https://xenbits.xenproject.org/xsa/advisory-425.txt - Vendor Advisory~~	() https://xenbits.xenproject.org/xsa/advisory-425.txt - Vendor Advisory

04 Feb 2024, 08:15

Type	Values Removed	Values Added
References		() https://security.gentoo.org/glsa/202402-07 -

Information

Published : 2023-01-26 21:16

Updated : 2024-11-21 07:24

NVD link : CVE-2022-42330

Mitre link : CVE-2022-42330

CVE.ORG link : CVE-2022-42330

JSON object : View

Products Affected

xen

xen

CWE

NVD-CWE-noinfo

{"id": "CVE-2022-42330", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2023-01-26T21:16:47.947", "references": [{"url": "https://security.gentoo.org/glsa/202402-07", "source": "security@xen.org"}, {"url": "https://xenbits.xenproject.org/xsa/advisory-425.txt", "tags": ["Vendor Advisory"], "source": "security@xen.org"}, {"url": "http://xenbits.xen.org/xsa/advisory-425.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.gentoo.org/glsa/202402-07", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://xenbits.xenproject.org/xsa/advisory-425.txt", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Guests can cause Xenstore crash via soft reset When a guest issues a \"Soft Reset\" (e.g. for performing a kexec) the libxl based Xen toolstack will normally perform a XS_RELEASE Xenstore operation. Due to a bug in xenstored this can result in a crash of xenstored. Any other use of XS_RELEASE will have the same impact."}, {"lang": "es", "value": "Los invitados pueden provocar un fallo de Xenstore mediante un reinicio por software Cuando un invitado emite un \"Reinicio por software\" (por ejemplo, para realizar un kexec), la pila de herramientas de Xen basada en libxl normalmente realizar\u00e1 una operaci\u00f3n XS_RELEASE de Xenstore. Debido a un error en xenstored, esto puede provocar un fallo de xenstored. Cualquier otro uso de XS_RELEASE tendr\u00e1 el mismo impacto."}], "lastModified": "2024-11-21T07:24:45.950", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:xen:xen:4.17.0:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "7F641815-8FA3-4815-A02F-5D674214D7FC"}], "operator": "OR"}]}], "sourceIdentifier": "security@xen.org"}