Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2022-42326
HistoryNov 01, 2022 - 1:15 p.m.

CVE-2022-42326

2022-11-0113:15:00
Alpine Linux Development Team
security.alpinelinux.org
9

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] In case a node has been created in a transaction and it is later deleted in the same transaction, the transaction will be terminated with an error. As this error is encountered only when handling the deleted node at transaction finalization, the transaction will have been performed partially and without updating the accounting information. This will enable a malicious guest to create arbitrary number of nodes.

OSVersionArchitecturePackageVersionFilename
Alpine3.16-mainnoarchxen= 4.16.2-r0UNKNOWN
Alpine3.13-mainnoarchxen= 4.14.5-r7UNKNOWN
Alpine3.17-mainnoarchxen= 4.16.2-r2UNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H