CVE-2022-42330: High severity xen xapi vulnerability
Published Jan 26, 2023
·Updated
Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libxl based Xen toolstack will normally perform a XSRELEASE Xenstore operation. Due to a bug in xenstored this can result in a crash of xenstored. Any other use of XSRELEASE will have the same impact.
Affected Software
1 affected component
XEN Xen=4.17.0
Event History
Jan 26, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-42330?
The severity of CVE-2022-42330 is high.
2
How does CVE-2022-42330 affect Xen Xen version 4.17.0?
CVE-2022-42330 affects Xen Xen version 4.17.0.
3
What can cause a Xenstore crash in CVE-2022-42330?
A guest issuing a Soft Reset can cause a Xenstore crash in CVE-2022-42330.
4
What operation can result in a crash of xenstored in CVE-2022-42330?
Performing XS_RELEASE operation can result in a crash of xenstored in CVE-2022-42330.
5
Is there a fix available for CVE-2022-42330?
Please refer to the provided reference link for available fixes for CVE-2022-42330.