Resource exhaustion in Xen - CVE-2022-33746
Published: July 19, 2023
Vulnerability identifier: #VU78439
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-33746
CWE-ID: CWE-400
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources when freeing the P2M pool. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.
Affected software
Xen
Oracle VM Server for x86
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
xen-debugsource
xen-doc-html
xen-libs-32bit
xen-libs
xen-libs-debuginfo-32bit
xen-libs-debuginfo
xen-tools
xen-tools-debuginfo
xen-tools-domU
xen-tools-domU-debuginfo
xen
xen-devel
xen-tools-xendomains-wait-disk
xen-libs-32bit-debuginfo
Oracle VM Server for x86
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
xen-debugsource
xen-doc-html
xen-libs-32bit
xen-libs
xen-libs-debuginfo-32bit
xen-libs-debuginfo
xen-tools
xen-tools-debuginfo
xen-tools-domU
xen-tools-domU-debuginfo
xen
xen-devel
xen-tools-xendomains-wait-disk
xen-libs-32bit-debuginfo
How to mitigate CVE-2022-33746
Install updates from vendor's website.
xen-debugsource - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-doc-html - addressed in versions 4.7.6_28-43.98.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs-32bit - addressed in versions 4.7.6_28-43.98.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_28-43.98.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1
xen-libs-debuginfo - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-debuginfo - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-domU - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-devel - addressed in versions 4.10.4_40-150000.3.84.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs-32bit-debuginfo - addressed in versions 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-doc-html - addressed in versions 4.7.6_28-43.98.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs-32bit - addressed in versions 4.7.6_28-43.98.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_28-43.98.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1
xen-libs-debuginfo - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-debuginfo - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-domU - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen - addressed in versions 4.7.6_28-43.98.1, 4.10.4_40-150000.3.84.1, 4.11.4_34-2.83.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-devel - addressed in versions 4.10.4_40-150000.3.84.1, 4.12.4_28-3.77.1, 4.12.4_30-150100.3.80.1, 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_16-150200.3.65.1, 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
xen-libs-32bit-debuginfo - addressed in versions 4.14.5_06-150300.3.35.1, 4.16.2_06-150400.4.11.1
External References
- https://xenbits.xenproject.org/xsa/advisory-410.txt
- http://xenbits.xen.org/xsa/advisory-410.html
- http://www.openwall.com/lists/oss-security/2022/10/11/3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWSC77GS5NATI3TT7FMVPULUPXR635XQ/
- https://www.debian.org/security/2022/dsa-5272
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TJOMUNGW6VTK5CZZRLWLVVEOUPEQBRHI/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/