CVE-2023-34323 xenstored: A transaction conflict can crash C Xenstored

2024-01-0516:30:32

XEN

www.cve.org

cve-2023-34323

xenstored

transaction conflict

quota

negative

assert

crash

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.8%

JSON

When a transaction is committed, C Xenstored will first check
the quota is correct before attempting to commit any nodes. It would
be possible that accounting is temporarily negative if a node has
been removed outside of the transaction.

Unfortunately, some versions of C Xenstored are assuming that the
quota cannot be negative and are using assert() to confirm it. This
will lead to C Xenstored crash when tools are built without -DNDEBUG
(this is the default).

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "product": "Xen",
    "vendor": "Xen",
    "versions": [
      {
        "status": "unknown",
        "version": "consult Xen advisory XSA-440"
      }
    ]
  }
]