Xen 4.14.x/4.15.x/4.16.x/4.17.x HVM Guest allocation of resources

Summaryinfo

A vulnerability classified as problematic was found in Xen 4.14.x/4.15.x/4.16.x/4.17.x. The affected element is an unknown function of the component HVM Guest Handler. The manipulation results in an unknown weakness. This vulnerability is reported as CVE-2022-42334. No exploit exists. A patch should be applied to remediate this issue.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Xen 4.14.x/4.15.x/4.16.x/4.17.x (Virtualization Software). Affected is an unknown function of the component HVM Guest Handler. CWE is classifying the issue as CWE-770. The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults which would otherwise be put in place. While not exposed to the affected guests themselves, the interface specifically exists for domains controlling such guests. This interface may therefore be used by not fully privileged entities, e.g. qemu running deprivileged in Dom0 or qemu running in a so called stub-domain. With this exposure it is an issue that - the number of the such controlled regions was unbounded (CVE-2022-42333), - installation and removal of such regions was not properly serialized (CVE-2022-42334).

The weakness was disclosed 03/21/2023. The advisory is available at xenbits.xenproject.org. This vulnerability is traded as CVE-2022-42334 since 10/03/2022. The technical details are unknown and an exploit is not available.

Applying a patch is able to eliminate this problem.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Virtualization Software

Name

• Xen

Version

• 4.14.x
• 4.15.x
• 4.16.x
• 4.17.x

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion