Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-42284 State: PUBLISHED Published: 2023-01-13T01:45:54.633Z Last Updated: 2025-04-07T18:09:59.482Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-312 Description: NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credentials exposure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42285 State: PUBLISHED Published: 2023-01-13T01:48:15.662Z Last Updated: 2025-04-07T18:03:34.758Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-1231 Description: DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42286 State: PUBLISHED Published: 2023-01-13T02:06:23.110Z Last Updated: 2025-04-07T18:02:45.241Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-119 Description: DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42287 State: PUBLISHED Published: 2023-01-13T02:07:42.144Z Last Updated: 2025-04-07T17:58:09.579Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-22 Description: NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42288 State: PUBLISHED Published: 2023-01-13T02:09:02.245Z Last Updated: 2025-04-07T17:56:27.043Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-208 Description: NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may lead to an information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42289 State: PUBLISHED Published: 2023-01-13T02:09:44.143Z Last Updated: 2025-04-07T17:55:58.137Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-78 Description: NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42290 State: PUBLISHED Published: 2023-01-13T02:28:58.208Z Last Updated: 2025-04-07T17:52:31.601Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX servers Problem Types: CWE-78 Description: NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5435
CVE ID: CVE-2022-42291 State: PUBLISHED Published: 2023-02-07T02:16:07.803Z Last Updated: 2025-03-25T15:21:59.301Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H) Vendors: NVIDIA Products: GeForce Experience Problem Types: CWE-1386 Description: NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked location, which may lead to data tampering. An attacker does not have explicit control over the exploitation of this vulnerability, which requires the user to explicitly launch the installer from the compromised directory. Additional Analyst Notes: - CVE P
h requires the user to explicitly launch the installer from the compromised directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5384
CVE ID: CVE-2022-42292 State: PUBLISHED Published: 2023-02-07T02:31:42.937Z Last Updated: 2025-03-25T14:45:08.019Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H) Vendors: NVIDIA Products: GeForce Experience Problem Types: CWE-59 Description: NVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator privileges can create a symbolic link to a file that requires elevated privileges to write to or modify, which may lead to denial of service, escalation of privilege or limited data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/ans
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5384
CVE ID: CVE-2022-42293 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-42294 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-42295 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-42296 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-42297 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-42298 State: REJECTED Published: N/A Last Updated: 2023-03-01T00:00:00 Description: No description available.
CVE ID: CVE-2022-42299 State: PUBLISHED Published: 2022-10-03T14:49:28 Last Updated: 2024-08-03T13:03:45.931Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService service. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-012#M3
CVE ID: CVE-2022-42300 State: PUBLISHED Published: 2022-10-03T14:49:21 Last Updated: 2024-08-03T13:03:45.935Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:N/A:L/C:N/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server nbars process can be crashed resulting in a denial of service. (Note: the watchdog service will automatically restart the process.) Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-013#M2
CVE ID: CVE-2022-42301 State: PUBLISHED Published: 2022-10-03T14:49:13 Last Updated: 2024-08-03T13:03:45.974Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AC:L/AV:N/A:L/C:L/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) injection attack through the nbars process. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-013#M1
CVE ID: CVE-2022-42302 State: PUBLISHED Published: 2022-10-03T14:49:05 Last Updated: 2024-08-03T13:03:45.915Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting the NBFSMCLIENT service. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-011#C1
CVE ID: CVE-2022-42303 State: PUBLISHED Published: 2022-10-03T14:48:58 Last Updated: 2024-08-03T13:03:45.917Z Severity: HIGH (CVSS 8 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a second-order SQL Injection attack affecting the NBFSMCLIENT service by leveraging CVE-2022-42302. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-011#H1
CVE ID: CVE-2022-42304 State: PUBLISHED Published: 2022-10-03T14:48:42 Last Updated: 2024-08-03T13:03:45.919Z Severity: HIGH (CVSS 8 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The NetBackup Primary server is vulnerable to a SQL Injection attack affecting idm, nbars, and SLP manager code. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-011#H2
CVE ID: CVE-2022-42305 State: PUBLISHED Published: 2022-10-03T14:48:35 Last Updated: 2024-08-03T13:03:45.898Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a Path traversal attack through the DiscoveryService service. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-012#M1
CVE ID: CVE-2022-42306 State: PUBLISHED Published: 2022-10-03T14:48:27 Last Updated: 2024-08-03T13:03:45.941Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:L/A:H/C:N/I:N/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can send a crafted packet to pbx_exchange during registration and cause a NULL pointer exception, effectively crashing the pbx_exchange process. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-010#M1
CVE ID: CVE-2022-42307 State: PUBLISHED Published: 2022-10-03T14:48:17 Last Updated: 2024-08-03T13:03:45.974Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity (XXE) Injection attack through the DiscoveryService service. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-012#M2
CVE ID: CVE-2022-42308 State: PUBLISHED Published: 2022-10-03T14:48:07 Last Updated: 2024-08-03T13:03:45.963Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AC:L/AV:L/A:H/C:N/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can delete arbitrary files by leveraging a path traversal in the pbx_exchange registration code. Additional Analyst Notes: - CVE Program Container: References: - https://www.veritas.com/content/support/en_US/security/VTS22-010#C1
CVE ID: CVE-2022-42309 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T13:03:45.940Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during node creation in an error path, resulting in a crash of xenstored or a memory corruption in xenstored causing further damage. Entering the error path can be controlled by the guest e.g. by exceeding the quota value of maximum nodes per domain. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-414.txt - http://xenbits.xen.org/x
s: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-414.txt - http://xenbits.xen.org/xsa/advisory-414.html - http://www.openwall.com/lists/oss-security/2022/11/01/4 - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42310 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T13:03:45.923Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is committed after this situation, nodes without a valid parent can be made permanent in the data base. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-415.txt - http://xenbits.
lyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-415.txt - http://xenbits.xen.org/xsa/advisory-415.html - http://www.openwall.com/lists/oss-security/2022/11/01/5 - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42311 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T15:05:48.860Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored to allocate vast amounts of memory, eventually resulting in a Denial of Service (DoS) of xenstored. There are multiple ways how guests can cause large memory allocations in xenstored: - - by issuing new requests to xenstored without reading the responses, causing the responses to be buffered in memory
- - by issuing new requests to xenstored without reading the responses, causing the responses to be buffered in memory - - by causing large number of watch events to be generated via setting up multiple xenstore watches and then e.g. deleting many xenstore nodes below the watched path - - by creating as many nodes as allowed with the maximum allowed size and path length in as many transactions as possible - - by accessing many nodes inside a transaction Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenbits.xenproject.org/xsa/advisory-326.txt - http://xenbits.xen.org/xsa/advisory-326.html - https://www.debian.org/security/2022/dsa-5272 - ht
xsa/advisory-326.txt - http://xenbits.xen.org/xsa/advisory-326.html - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/
CVE ID: CVE-2022-42312 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T14:59:37.340Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored to allocate vast amounts of memory, eventually resulting in a Denial of Service (DoS) of xenstored. There are multiple ways how guests can cause large memory allocations in xenstored: - - by issuing new requests to xenstored without reading the responses, causing the responses to be buffered in memory
CVE ID: CVE-2022-42313 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T14:57:46.018Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored to allocate vast amounts of memory, eventually resulting in a Denial of Service (DoS) of xenstored. There are multiple ways how guests can cause large memory allocations in xenstored: - - by issuing new requests to xenstored without reading the responses, causing the responses to be buffered in memory
CVE ID: CVE-2022-42314 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T14:50:30.164Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored to allocate vast amounts of memory, eventually resulting in a Denial of Service (DoS) of xenstored. There are multiple ways how guests can cause large memory allocations in xenstored: - - by issuing new requests to xenstored without reading the responses, causing the responses to be buffered in memory
CVE ID: CVE-2022-42315 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T14:49:50.978Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored to allocate vast amounts of memory, eventually resulting in a Denial of Service (DoS) of xenstored. There are multiple ways how guests can cause large memory allocations in xenstored: - - by issuing new requests to xenstored without reading the responses, causing the responses to be buffered in memory
CVE ID: CVE-2022-42316 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T19:55:24.818Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored to allocate vast amounts of memory, eventually resulting in a Denial of Service (DoS) of xenstored. There are multiple ways how guests can cause large memory allocations in xenstored: - - by issuing new requests to xenstored without reading the responses, causing the responses to be buffered in memory
CVE ID: CVE-2022-42317 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T19:52:32.158Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored to allocate vast amounts of memory, eventually resulting in a Denial of Service (DoS) of xenstored. There are multiple ways how guests can cause large memory allocations in xenstored: - - by issuing new requests to xenstored without reading the responses, causing the responses to be buffered in memory
CVE ID: CVE-2022-42318 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T16:38:32.706Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Malicious guests can cause xenstored to allocate vast amounts of memory, eventually resulting in a Denial of Service (DoS) of xenstored. There are multiple ways how guests can cause large memory allocations in xenstored: - - by issuing new requests to xenstored without reading the responses, causing the responses to be buffered in memory
CVE ID: CVE-2022-42319 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T13:03:45.976Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quite large amounts of memory temporarily. This memory is freed only after the request has been finished completely. A request is regarded to be finished only after the guest has read the response message of the request from the ring page. Thus a guest not reading the response can cause xenstored to not free the temporary memory. This can result in memory shortages causing Denial of Servi
sponse can cause xenstored to not free the temporary memory. This can result in memory shortages causing Denial of Service (DoS) of xenstored. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-416.txt - http://xenbits.xen.org/xsa/advisory-416.html - http://www.openwall.com/lists/oss-security/2022/11/01/6 - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://lists.fedor
archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ - https://security.gentoo.org/glsa/202402-07