VULNERABILITY INTELLIGENCE

CVE-2022-42309

CVSS score8.8 HIGH
EPSS probability0.30%
CISA KEVNot currently listed
Published2022-11-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during node creation in an error path, resulting in a crash of xenstored or a memory corruption in xenstored causing further damage. Entering the error path can be controlled by the guest e.g. by exceeding the quota value of maximum nodes per domain.

Weakness classification

  • CWE-763: Release of Invalid Pointer or Reference

Primary references