admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-08-04 08:44:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

XSA-413 CVE-2022-33749

Browse Source 
Xensec source data: xsa.git#xsa-413-v2
Xensec source infra: xsa.git#dc3f5a339aa9b1a19b40af33b9adcdf2a572dfbf
This commit is contained in:
Xen Project Security Team 2022-10-11 12:45:16 +00:00
parent c3d12ddbd5
commit fdf503b411
1 changed files with 93 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

108
2022/33xxx/CVE-2022-33749.json
View File

@ -1,18 +1,96 @@
{ {
"data_type": "CVE", "CVE_data_meta" : {
"data_format": "MITRE", "ASSIGNER" : "security@xenproject.org",
"data_version": "4.0", "ID" : "CVE-2022-33749"
"CVE_data_meta": { },
"ID": "CVE-2022-33749", "affects" : {
"ASSIGNER": "cve@mitre.org", "vendor" : {
"STATE": "RESERVED" "vendor_data" : [
},
"description": {
"description_data": [
{ {
"lang": "eng", "product" : {
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided." "product_data" : [
{
"product_name" : "Xapi",
"version" : {
"version_data" : [
{
"version_affected" : "?",
"version_value" : "consult Xen advisory XSA-413"
}
]
}
}
]
},
"vendor_name" : "Xapi"
} }
] ]
} }
} },
"configuration" : {
"configuration_data" : {
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "All versions of XAPI are vulnerable.\n\nSystems which are not using the XAPI toolstack are not vulnerable."
}
]
}
}
},
"data_format" : "MITRE",
"data_type" : "CVE",
"data_version" : "4.0",
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "XAPI open file limit DoS\n\nIt is possible for an unauthenticated client on the network to cause\nXAPI to hit its file-descriptor limit. This causes XAPI to be unable\nto accept new requests for other (trusted) clients, and blocks XAPI\nfrom carrying out any tasks that require the opening of file\ndescriptors."
}
]
},
"impact" : {
"impact_data" : {
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "An attacker is capable of blocking connections to the XAPI HTTP\ninterface, and also interrupt ongoing operations, causing a XAPI\ntoolstack Denial of Service. Such DoS would also affect any guests\nthat require toolstack actions."
}
]
}
}
},
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng",
"value" : "unknown"
}
]
}
]
},
"references" : {
"reference_data" : [
{
"url" : "https://xenbits.xenproject.org/xsa/advisory-413.txt"
}
]
},
"workaround" : {
"workaround_data" : {
"description" : {
"description_data" : [
{
"lang" : "eng",
"value" : "Not exposing to untrusted clients the network interface XAPI is\nlistening on will prevent the issue."
}
]
}
}
}
}