Resource exhaustion in Xen - CVE-2022-42319

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU70587

Resource exhaustion in Xen - CVE-2022-42319

Published: January 2, 2023


Vulnerability identifier: #VU70587
CSH Severity: Medium
CVSS v4: 8.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H]
CVE-ID: CVE-2022-42319
CWE-ID: CWE-400
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a malicious guest to perform a denial of service (DoS) attack.

The vulnerability exists in Xenstore due to allocated temporary memory is freed only after the request is completely finished. A malicious guest can allocate large amounts of memory and perform a denial of service (DoS) attack.


Affected software

Xen
Oracle VM Server for x86
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
Fedora
xen-tools-domU-debuginfo
xen
xen-tools-domU
xen-tools-debuginfo
xen-tools
xen-libs-debuginfo
xen-libs-debuginfo-32bit
xen-libs
xen-libs-32bit
xen-doc-html
xen-debugsource
xen-devel
xen-tools-xendomains-wait-disk

How to mitigate CVE-2022-42319

Install updates from vendor's website.

xen-tools-domU-debuginfo - addressed in versions 4.9.4_34-3.114.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_30-3.82.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1
xen - addressed in versions 4.9.4_34-3.114.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_30-3.82.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1
xen-tools-domU - addressed in versions 4.9.4_34-3.114.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_30-3.82.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1
xen-tools-debuginfo - addressed in versions 4.9.4_34-3.114.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_30-3.82.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1
xen-tools - addressed in versions 4.9.4_34-3.114.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_30-3.82.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1
xen-libs-debuginfo - addressed in versions 4.9.4_34-3.114.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_30-3.82.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1
xen-libs-debuginfo-32bit - addressed in versions 4.9.4_34-3.114.1, 4.11.4_34-2.83.1, 4.12.4_30-3.82.1
xen-libs - addressed in versions 4.9.4_34-3.114.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_30-3.82.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1
xen-libs-32bit - addressed in versions 4.9.4_34-3.114.1, 4.11.4_34-2.83.1, 4.12.4_30-3.82.1
xen-doc-html - addressed in versions 4.9.4_34-3.114.1, 4.11.4_34-2.83.1, 4.12.4_30-3.82.1
xen-debugsource - addressed in versions 4.9.4_34-3.114.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_30-3.82.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1
xen-devel - addressed in versions 4.10.4_40-150000.3.84.1, 4.12.4_30-3.82.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1
xen-tools-xendomains-wait-disk - update to 4.13.4_16-150200.3.65.1
xen - addressed in versions 4.16.2-3.fc36, 4.16.2-3.fc37, 4.16.2-4.fc37

External References

Related Security Bulletins