Lucene search

GoogleOSV:CVE-2022-33749

HistoryOct 11, 2022 - 1:15 p.m.

CVE-2022-33749

2022-10-1113:15:10

Google

osv.dev

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

41.7%

JSON

XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit. This causes XAPI to be unable to accept new requests for other (trusted) clients, and blocks XAPI from carrying out any tasks that require the opening of file descriptors.

CPENameOperatorVersion
xeneq4.16.1-r1
xeneq4.6.3-r0
xeneq4.13.0-r3
xeneq4.14.1-r5
xeneq4.8.1-r0
xeneq4.16.1-r3
xeneq4.5.1-r1
xeneq4.6.1-r1
xeneq4.2.1-r1
xeneq4.13.1-r0

Name	Operator	Version
xen	eq	4.16.1-r1
xen	eq	4.6.3-r0
xen	eq	4.13.0-r3
xen	eq	4.14.1-r5
xen	eq	4.8.1-r0
xen	eq	4.16.1-r3
xen	eq	4.5.1-r1
xen	eq	4.6.1-r1
xen	eq	4.2.1-r1
xen	eq	4.13.1-r0

Rows per page:

1-10 of 2001

References

www.openwall.com/lists/oss-security/2022/10/11/4

xenbits.xen.org/xsa/advisory-413.html

security.gentoo.org/glsa/202402-07

xenbits.xenproject.org/xsa/advisory-413.txt

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

41.7%

JSON

Related for OSV:CVE-2022-33749