CVE-2022-42323: Medium severity XEN Xen vulnerability
Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322 any Xenstore node owned by a removed domain will be modified to be owned by Dom0. This will allow two malicious guests working together to create an arbitrary number of Xenstore nodes. This is possible by domain A letting domain B write into domain A's local Xenstore tree. Domain B can then create many nodes and reboot. The nodes created by domain B will now be owned by Dom0. By repeating this process over and over again an arbitrary number of nodes can be created, as Dom0's number of nodes isn't limited by Xenstore quota.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/xento a version that resolves this vulnerability.Fixed in 4.14.6-1Fixed in 4.14.5+94-ge49571868d-1Fixed in 4.17.1+2-gb773c48e36-1Fixed in 4.17.2+55-g0b56bed864-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch XSA-322 - Operational
After applying the XSA-322 fix, verify that any Xenstore node previously owned by a removed domain has been modified to be owned by Dom0.
Event History
Frequently Asked Questions
What is the severity of CVE-2022-42323?
The severity of CVE-2022-42323 is medium with a severity value of 5.5.
How can cooperating guests create arbitrary numbers of nodes in Xenstore?
Cooperating guests can create arbitrary numbers of nodes in Xenstore by exploiting the vulnerability in CVE-2022-42323.
Which software packages are affected by CVE-2022-42323?
The affected software packages include Xen (specific versions) and Debian Linux (version 11.0), Fedora (versions 35, 36, and 37).
What is the remedy for CVE-2022-42323?
To remediate CVE-2022-42323, update Xen to version 4.14.6-1 or 4.14.5+94-ge49571868d-1, or update Debian Linux to version 11.0, or update Fedora to versions 35, 36, or 37.
Where can I find more information about CVE-2022-42323?
You can find more information about CVE-2022-42323 in the following references: [1] [2] [3].