Buffer overflow in Xen - CVE-2022-26364

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU64447

Buffer overflow in Xen - CVE-2022-26364

Published: June 16, 2022


Vulnerability identifier: #VU64447
CSH Severity: High
CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-26364
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to insufficient care with non-coherent mappings. A remote attacker can pass a specially crafted data and trigger memory corruption and execute arbitrary code on the target system.


Affected software

Xen
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Server Applications
openSUSE Leap
Fedora
xen-tools-domU-debuginfo
xen-tools-domU
xen-tools-debuginfo
xen-tools
xen-libs-debuginfo
xen-libs-debuginfo-32bit
xen-libs
xen-libs-32bit
xen-doc-html
xen-debugsource
xen
xen-devel
xen-tools-xendomains-wait-disk
xen-libs-32bit-debuginfo
xen (Debian package)
collectd
qemu

How to mitigate CVE-2022-26364

Install updates from vendor's website.

xen-tools-domU-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.12.4_30-150100.3.80.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-tools-domU - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.12.4_30-150100.3.80.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-tools-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.12.4_30-150100.3.80.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-tools - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.12.4_30-150100.3.80.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-libs-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.12.4_30-150100.3.80.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1
xen-libs - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.12.4_30-150100.3.80.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-libs-32bit - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-doc-html - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-debugsource - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.12.4_30-150100.3.80.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.12.4_30-150100.3.80.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-devel - addressed in versions 4.10.4_36-150000.3.77.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.12.4_30-150100.3.80.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-libs-32bit-debuginfo - addressed in versions 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen (Debian package) - update to 4.14.5+24-g87d90d511c-1
xen - addressed in versions 4.15.2-5.fc35, 4.15.3-1.fc35, 4.15.3-2.fc35, 4.16.1-2.fc36
collectd - update to 5.12.0-16.fc36
qemu - update to 6.2.0-12.fc36

External References

Related Security Bulletins