Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2022-33747
HistoryOct 11, 2022 - 1:15 p.m.

CVE-2022-33747

2022-10-1113:15:00
Alpine Linux Development Team
security.alpinelinux.org
11

3.8 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest’s P2M (Physical-to-Machine) mapping. When large pages are in use to map guest pages in the 2nd-stage page tables, such a removal operation may incur a memory allocation (to replace a large mapping with individual smaller ones). These memory allocations are taken from the global memory pool. A malicious guest might be able to cause the global memory pool to be exhausted by manipulating its own P2M mappings.

OSVersionArchitecturePackageVersionFilename
Alpine3.16-mainnoarchxen= 4.16.2-r0UNKNOWN
Alpine3.13-mainnoarchxen= 4.14.5-r7UNKNOWN
Alpine3.17-mainnoarchxen= 4.16.2-r2UNKNOWN

3.8 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L