DeutschShown in its original language — a full translation is planned for a future version.
Xen / Citrix Hypervisor: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2022-10-11
Ein Angreifer aus dem angrenzenden Netzwerk kann mehrere Schwachstellen in Xen und Citrix Hypervisor ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-33749US | medium5.3 | — | ||
XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit. This causes XAPI to be unable to accept new req… | ||||
| CVE-2022-33748US | medium5.6 | — | ||
lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were n… | ||||
| CVE-2022-33747US | low3.8 | — | ||
Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M (Physical-to-Machine) mapping. When large pages are in us… | ||||
| CVE-2022-33746US | medium6.5 | — | ||
P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of significant size. Therefore its freeing may take more time tha… | ||||
02
references
External citations — patches, advisories, analysis.
- Debian Security Advisory DSA-5272 vom 2022-11-06external
- SUSE Security Update SUSE-SU-2022:3925-1 vom 2022-11-09external
- SUSE Security Update SUSE-SU-2022:3928-1 vom 2022-11-10external
- SUSE Security Update SUSE-SU-2022:3947-1 vom 2022-11-11external
- SUSE Security Update SUSE-SU-2022:3971-1 vom 2022-11-14external
- SUSE Security Update SUSE-SU-2022:4007-1 vom 2022-11-16external
- SUSE Security Update SUSE-SU-2022:4051-1 vom 2022-11-17external
- SUSE Security Update SUSE-SU-2022:4241-1 vom 2022-11-28external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan