Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

19 records

TI-2022-20543 CVE-2022-42327 · GHSA-rgfj-62rr-5vf5

Improper access control in xen

Priority LOW 33

x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00245 Published 2022-11-01 No fix listed CWE-284
TI-2022-20542 CVE-2022-42326 · GHSA-f5v3-qm6r-5p3w

Memory leak in xen

Priority LOW 25

Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] In case a node has b…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00306 Published 2022-11-01 No fix listed CWE-401
TI-2022-20541 CVE-2022-42325 · GHSA-x7vp-fr4m-26vq

Memory leak in xen

Priority LOW 25

Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] In case a node has b…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00306 Published 2022-11-01 No fix listed CWE-401
TI-2022-20540 CVE-2022-42324 · GHSA-2hqj-m7qj-9pc3

Incorrect numeric conversion in xen

Priority LOW 25

Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00297 Published 2022-11-01 No fix listed CWE-681
TI-2022-20539 CVE-2022-42323 · GHSA-gvg6-g9vq-r6gw

Memory leak in xen

Priority LOW 25

Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00306 Published 2022-11-01 No fix listed CWE-401
TI-2022-20538 CVE-2022-42322 · GHSA-cq56-j359-2484

Memory leak in xen

Priority LOW 25

Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00306 Published 2022-11-01 No fix listed CWE-401
TI-2022-20537 CVE-2022-42321 · GHSA-fwfg-5hqv-4r78

Uncontrolled recursion in xen

Priority LOW 29

Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations (e.g.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00297 Published 2022-11-01 No fix listed CWE-674
TI-2022-20535 CVE-2022-42319 · GHSA-jxpc-fxw3-65cc

Memory leak in xen

Priority LOW 29

Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quite large amounts of memory temporarily.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00297 Published 2022-11-01 No fix listed CWE-401
TI-2022-20534 CVE-2022-42318 · GHSA-j33c-mrwq-fprw

Resource allocation without limits in xen

Priority LOW 28

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored t…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00264 Published 2022-11-01 No fix listed CWE-770
TI-2022-20533 CVE-2022-42317 · GHSA-87qx-qrr6-fwpw

Resource allocation without limits in xen

Priority LOW 28

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored t…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00266 Published 2022-11-01 No fix listed CWE-770
TI-2022-20532 CVE-2022-42316 · GHSA-xxpf-x8mq-p6v4

Resource allocation without limits in xen

Priority LOW 28

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored t…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00266 Published 2022-11-01 No fix listed CWE-770
TI-2022-20531 CVE-2022-42315 · GHSA-qjmx-q3f9-2ph2

Resource allocation without limits in xen

Priority LOW 28

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored t…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00264 Published 2022-11-01 No fix listed CWE-770
TI-2022-20530 CVE-2022-42314 · GHSA-86qc-cjw2-jqj2

Resource allocation without limits in xen

Priority LOW 28

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored t…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00266 Published 2022-11-01 No fix listed CWE-770
TI-2022-20529 CVE-2022-42313 · GHSA-6cmm-6365-v57f

Resource allocation without limits in xen

Priority LOW 28

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored t…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00264 Published 2022-11-01 No fix listed CWE-770
TI-2022-20528 CVE-2022-42312 · GHSA-74fc-8pm6-2r48

Resource allocation without limits in xen

Priority LOW 28

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored t…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00264 Published 2022-11-01 No fix listed CWE-770
TI-2022-20527 CVE-2022-42311 · GHSA-hcpw-h46r-3c39

Resource allocation without limits in xen

Priority LOW 28

Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored t…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00264 Published 2022-11-01 No fix listed CWE-770
Priority LOW 25

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the e…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00291 Published 2022-11-01 No fix listed CWE-459
Priority LOW 38

Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during node creation in an error path, resulting in a crash of xenstored or a memory co…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00302 Published 2022-11-01 No fix listed CWE-763