Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2022-42323
HistoryNov 01, 2022 - 1:15 p.m.

CVE-2022-42323

2022-11-0113:15:11
Debian Security Bug Tracker
security-tracker.debian.org
18
xenstore
arbitrary node
dom0 ownership
security risk

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.1%

Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322 any Xenstore node owned by a removed domain will be modified to be owned by Dom0. This will allow two malicious guests working together to create an arbitrary number of Xenstore nodes. This is possible by domain A letting domain B write into domain A’s local Xenstore tree. Domain B can then create many nodes and reboot. The nodes created by domain B will now be owned by Dom0. By repeating this process over and over again an arbitrary number of nodes can be created, as Dom0’s number of nodes isn’t limited by Xenstore quota.

OSVersionArchitecturePackageVersionFilename
Debian12allxen< 4.16.2+90-g0d39a6d1ae-1xen_4.16.2+90-g0d39a6d1ae-1_all.deb
Debian11allxen< 4.14.5+86-g1c354767d5-1xen_4.14.5+86-g1c354767d5-1_all.deb
Debian999allxen< 4.16.2+90-g0d39a6d1ae-1xen_4.16.2+90-g0d39a6d1ae-1_all.deb
Debian13allxen< 4.16.2+90-g0d39a6d1ae-1xen_4.16.2+90-g0d39a6d1ae-1_all.deb

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.1%