The vulnerability of Xen hypervisors relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

🗓️ 06 Jul 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Xen hypervisor vulnerability allows buffer overflow leading to arbitrary code execution.

Reporter	Title	Published	Views	Family All 86
0day.today	Xen PV Guest Non-SELFSNOOP CPU Memory Corruption Exploit	7 Jul 202200:00	–	zdt
ATTACKERKB	CVE-2022-26364	9 Jun 202217:15	–	attackerkb
CNNVD	Xen 安全漏洞	9 Jun 202200:00	–	cnnvd
CVE	CVE-2022-26364	9 Jun 202212:50	–	cve
Cvelist	CVE-2022-26364	9 Jun 202212:50	–	cvelist
Debian	[SECURITY] [DSA 5184-1] xen security update	15 Jul 202218:05	–	debian
Debian CVE	CVE-2022-26364	9 Jun 202212:50	–	debiancve
Tenable Nessus	Debian DSA-5184-1 : xen - security update	16 Jul 202200:00	–	nessus
Tenable Nessus	GLSA-202208-23 : Xen: Multiple Vulnerabilities	15 Aug 202200:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2022:2065-1)	14 Jun 202200:00	–	nessus

Vulners

Node

novell suse_enterprise_storageMatch6

OR

novell suse_caas_platformMatch4.0

OR

novell suse_manager_proxyMatch4.2

OR

novell suse_manager_serverMatch4.2

OR

novell suse_enterprise_storageMatch7

OR

novell suse_manager_serverMatch4.1

OR

novell suse_manager_proxyMatch4.1

OR

novell suse_linux_enterprise_microMatch5.1

OR

novell suse_manager_retail_branch_serverMatch4.1

OR

novell suse_manager_retail_branch_serverMatch4.2

OR

novell suse_linux_enterprise_microMatch5.2

OR

linux xenRange<4.16-5

OR

linux xenRange<4.15-5

OR

linux xenRange<4.14-5

OR

novell opensuse_leapMatch15.3

OR

fedora fedoraMatch36

Source	Link
safe-surf	www.safe-surf.ru/upload/VULN/VULN-20220629.8.pdf
openwall	www.openwall.com/lists/oss-security/2022/06/09/4
xenbits	www.xenbits.xen.org/xsa/advisory-402.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/OH65U6FTTB5MLH5A6Q3TW7KVCGOG4MYI/
xenbits	www.xenbits.xenproject.org/xsa/advisory-402.txt
suse	www.suse.com/security/cve/CVE-2022-26364.html
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6/
packetstormsecurity	www.packetstormsecurity.com/files/167710/Xen-PV-Guest-Non-SELFSNOOP-CPU-Memory-Corruption.html
web	www.web.nvd.nist.gov/view/vuln/detail

13 Sep 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 36.7

CVSS 26.8

EPSS0.00494

Xen hypervisor Buffer overflow Arbitrary code execution