CVE-2022-42322: Medium severity XEN Xen vulnerability

Published Nov 1, 2022
·
Updated

Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322 any Xenstore node owned by a removed domain will be modified to be owned by Dom0. This will allow two malicious guests working together to create an arbitrary number of Xenstore nodes. This is possible by domain A letting domain B write into domain A's local Xenstore tree. Domain B can then create many nodes and reboot. The nodes created by domain B will now be owned by Dom0. By repeating this process over and over again an arbitrary number of nodes can be created, as Dom0's number of nodes isn't limited by Xenstore quota.

Affected Software

6 affected componentsFixes available
debian/xen<=4.11.4+107-gef32c7afa2-1
4.14.6-14.14.5+94-ge49571868d-14.17.1+2-gb773c48e36-14.17.2+55-g0b56bed864-1
XEN Xen
Debian Debian Linux=11.0
Fedoraproject Fedora=35
Fedoraproject Fedora=36
Fedoraproject Fedora=37

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/xen to a version that resolves this vulnerability.

    Fixed in 4.14.6-1Fixed in 4.14.5+94-ge49571868d-1Fixed in 4.17.1+2-gb773c48e36-1Fixed in 4.17.2+55-g0b56bed864-1
  2. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch XSA-322

Event History

Nov 1, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is CVE-2022-42322?

CVE-2022-42322 is a vulnerability in Xenstore that allows cooperating guests to create arbitrary numbers of nodes.

2

What is the severity of CVE-2022-42322?

The severity of CVE-2022-42322 is medium with a severity value of 5.5.

3

How does CVE-2022-42322 affect Xen Xen?

For Xen Xen, the affected version is up to and including 4.11.4+107-gef32c7afa2-1.

4

How does CVE-2022-42322 affect Debian Debian Linux?

For Debian Debian Linux, the affected version is 11.0.

5

How does CVE-2022-42322 affect Fedora?

For Fedora, the affected versions are 35, 36, and 37.

6

How can I fix CVE-2022-42322?

To fix CVE-2022-42322, apply the recommended patches provided by the vendor.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203