2024-01-05 19:00:28 +00:00

20 lines
901 B
JSON

{
"id": "CVE-2023-34323",
"sourceIdentifier": "security@xen.org",
"published": "2024-01-05T17:15:08.493",
"lastModified": "2024-01-05T18:23:44.497",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "When a transaction is committed, C Xenstored will first check\nthe quota is correct before attempting to commit any nodes. It would\nbe possible that accounting is temporarily negative if a node has\nbeen removed outside of the transaction.\n\nUnfortunately, some versions of C Xenstored are assuming that the\nquota cannot be negative and are using assert() to confirm it. This\nwill lead to C Xenstored crash when tools are built without -DNDEBUG\n(this is the default).\n"
}
],
"metrics": {},
"references": [
{
"url": "https://xenbits.xenproject.org/xsa/advisory-440.html",
"source": "security@xen.org"
}
]
}