Lucene search

Veracode Vulnerability DatabaseVERACODE:38256

HistoryNov 25, 2022 - 6:52 p.m.

Denial Of Service (DoS)

2022-11-2518:52:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

37.4%

JSON

xen is vulnerable to denial of service. The vulnerability exists because XAPI to be unable to accept new requests for other (trusted) clients which allows an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit.

CPENameOperatorVersion
xen:3.15eq4.15.1-r0
xen:3.15eq4.15.3-r0
xen:3.15eq4.15.1-r2
xen:3.15eq4.15.2-r1
xen:3.15eq4.15.2-r2
xen:3.15eq4.15.3-r1
xen:3.15eq4.15.3-r3
xen:3.15eq4.15.2-r0
xen:3.15eq4.15.3-r2
xen:3.14eq4.15.3-r0

Name	Operator	Version
xen:3.15	eq	4.15.1-r0
xen:3.15	eq	4.15.3-r0
xen:3.15	eq	4.15.1-r2
xen:3.15	eq	4.15.2-r1
xen:3.15	eq	4.15.2-r2
xen:3.15	eq	4.15.3-r1
xen:3.15	eq	4.15.3-r3
xen:3.15	eq	4.15.2-r0
xen:3.15	eq	4.15.3-r2
xen:3.14	eq	4.15.3-r0

Rows per page:

1-10 of 861

References

www.openwall.com/lists/oss-security/2022/10/11/4

xenbits.xen.org/xsa/advisory-413.html

secdb.alpinelinux.org/v3.14/main.yaml

secdb.alpinelinux.org/v3.15/main.yaml

xenbits.xenproject.org/xsa/advisory-413.txt

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

37.4%

JSON

Related for VERACODE:38256