Xenstored DoS by unprivileged domain

ISSUE DESCRIPTION Any guest issuing a Xenstore command accessing a node using the illegal node path "/local/domain/", will crash xenstored due to a clobbered error indicator in xenstored when verifying the node path. Note that the crash is forced via a failing assert statement in xenstored. In ca...

ALPINE-CVE-2022-42312

Xenstore: guests can let run xenstored out of memory This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Malicious guests can cause xenstored to allocate vast amounts of memory, eventually resulting in a Denial of Service...

Fedora 24 : xen (2017-03dc811be6)

Qemu: 9pfs: host memory leakage via v9fscreate CVE-2017-7377 1437873 ---- add additional patch for XSA-206 1436690 ---- xenstore denial of service via repeated update XSA-206 1436690 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...