Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-42320 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-11-20T14:37:31.914Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid. When a domain is gone, there might be Xenstore nodes left with access rights containing the domid of the removed domain. This is normally no problem, as those access right entries will be corrected when such a node is written later. There is a small time window when a new domain is created, where the access rights of a past domain with the same domid as the new one will be regarded to be still valid, leading
where the access rights of a past domain with the same domid as the new one will be regarded to be still valid, leading to the new domain being able to get access to a node which was meant to be accessible by the removed domain. For this to happen another domain needs to write the node before the newly created domain is being introduced to Xenstore by dom0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenbits.xenproject.org/xsa/advisory-417.txt - http://xenbits.xen.org/xsa/advisory-417.html - http://www.openwall.com/lists/oss-security/2022/11/01/7 - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/l
s/oss-security/2022/11/01/7 - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42321 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T13:03:45.928Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations (e.g. for deleting a sub-tree of Xenstore nodes). With sufficiently deep nesting levels this can result in stack exhaustion on xenstored, leading to a crash of xenstored. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-418.txt - http://xenbits.xen.org/xsa/advisory-418.html - http://www.openwall.com/lists/oss-security/2022/11/01/8 - https://www.
- http://xenbits.xen.org/xsa/advisory-418.html - http://www.openwall.com/lists/oss-security/2022/11/01/8 - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42322 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T13:03:45.973Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322 any Xenstore node owned by a removed domain will be modified to be owned by Dom0. This will allow two malicious guests working together to create an arbitrary number of Xenstore nodes. This is possible by domain A letting domain B write into domain A's local Xenstore tree. Domain B can then create many no
his is possible by domain A letting domain B write into domain A's local Xenstore tree. Domain B can then create many nodes and reboot. The nodes created by domain B will now be owned by Dom0. By repeating this process over and over again an arbitrary number of nodes can be created, as Dom0's number of nodes isn't limited by Xenstore quota. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-419.txt - http://xenbits.xen.org/xsa/advisory-419.html - http://www.openwall.com/lists/oss-security/2022/11/01/9 - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.
ebian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42323 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T13:03:45.898Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322 any Xenstore node owned by a removed domain will be modified to be owned by Dom0. This will allow two malicious guests working together to create an arbitrary number of Xenstore nodes. This is possible by domain A letting domain B write into domain A's local Xenstore tree. Domain B can then create many no
CVE ID: CVE-2022-42324 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T13:03:45.972Z Vendors: Xen Products: xen Problem Types: unknown Description: Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbus library takes a C uint32_t out of the ring and casts it directly to an Ocaml integer. In 64-bit Ocaml builds this is fine, but in 32-bit builds, it truncates off the most significant bit, and then creates unsigned/signed confusion in the remainder. This in turn can feed a negative value into logic not expecting a negative value, resulting in unexpected exceptions being thrown. The unexpected exception
ue into logic not expecting a negative value, resulting in unexpected exceptions being thrown. The unexpected exception is not handled suitably, creating a busy-loop trying (and failing) to take the bad packet out of the xenstore ring. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-420.txt - http://xenbits.xen.org/xsa/advisory-420.html - http://www.openwall.com/lists/oss-security/2022/11/01/10 - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-anno
fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42325 State: PUBLISHED Published: 2022-11-01T00:00:00 Last Updated: 2024-08-03T13:03:45.931Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] In case a node has been created in a transaction and it is later deleted in the same transaction, the transaction will be terminated with an error. As this error is encountered only when handling the deleted node at transaction finalization, the transaction will have been performed partially and without updating the accountin
node at transaction finalization, the transaction will have been performed partially and without updating the accounting information. This will enable a malicious guest to create arbitrary number of nodes. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-421.txt - http://xenbits.xen.org/xsa/advisory-421.html - http://www.openwall.com/lists/oss-security/2022/11/01/11 - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.or
2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42326 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T15:07:15.730Z Vendors: Xen Products: xen Problem Types: unknown Description: Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] In case a node has been created in a transaction and it is later deleted in the same transaction, the transaction will be terminated with an error. As this error is encountered only when handling the deleted node at transaction finalization, the transaction will have been performed partially and without updating the acco
leted node at transaction finalization, the transaction will have been performed partially and without updating the accounting information. This will enable a malicious guest to create arbitrary number of nodes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenbits.xenproject.org/xsa/advisory-421.txt - http://xenbits.xen.org/xsa/advisory-421.html - http://www.openwall.com/lists/oss-security/2022/11/01/11 - https://www.debian.org/security/2022/dsa-5272 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-ann
.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42327 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-05T19:11:37.065Z Vendors: Xen Products: xen Problem Types: unknown Description: x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode. Access to this shared page bypasses the expected isolation that should exist between two guests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenbits.xenproject.org/xsa/advisory-412.txt - http://xenbits.xen.org/xsa/advisory-412.html - http://www.openwal
https://xenbits.xenproject.org/xsa/advisory-412.txt - http://xenbits.xen.org/xsa/advisory-412.html - http://www.openwall.com/lists/oss-security/2022/11/01/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42328 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T14:26:39.413Z Vendors: Linux Products: Linux Problem Types: unknown Description: Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is con
er reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenbits.xenproject.org/xsa/advisory-424.txt - http://www.openwall.com/lists/oss-security/2022/12/08/3 - http://www.openwall.com/lists/oss-security/2022/12/08/2 - http://www.openwall.com/lists/oss-security/2022/12/09/2 - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html - https://lists.debian.org/debian-lts-announce/2022/12/msg00034.html
CVE ID: CVE-2022-42329 State: PUBLISHED Published: 2022-12-07T00:00:00.000Z Last Updated: 2025-04-23T14:24:50.092Z Vendors: Linux Products: Linux Problem Types: unknown Description: Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is con
CVE ID: CVE-2022-42330 State: PUBLISHED Published: 2023-01-26T00:00:00 Last Updated: 2024-08-03T13:03:45.923Z Vendors: Xen Products: xen Problem Types: unknown Description: Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libxl based Xen toolstack will normally perform a XS_RELEASE Xenstore operation. Due to a bug in xenstored this can result in a crash of xenstored. Any other use of XS_RELEASE will have the same impact. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-425.txt - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42331 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-13T16:33:19.580Z Vendors: Xen Products: xen Problem Types: unknown Description: x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-429.txt - http://www.openwall.com/lists/oss-security/2023/03/21/3 - http://xenbits.xen.o
its.xenproject.org/xsa/advisory-429.txt - http://www.openwall.com/lists/oss-security/2023/03/21/3 - http://xenbits.xen.org/xsa/advisory-429.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APBMS2Q6746AXAFAITNJMGBNFGNMVLWR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5L6PM4RE7MUE6OWA32ZVOXCP235RM2TM/ - https://www.debian.org/security/2023/dsa-5378 - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42332 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-13T16:33:20.153Z Vendors: Xen Products: xen Problem Types: unknown Description: x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called shadow mode. Shadow mode maintains a pool of memory used for both shadow page tables as well as auxiliary data structures. To migrate or snapshot guests, Xen additionally runs them in so called log-dirty mode. The data structures needed by the log-dirty tracking are part of aformentioned auxiliary data. In order to keep e
mode. The data structures needed by the log-dirty tracking are part of aformentioned auxiliary data. In order to keep error handling efforts within reasonable bounds, for operations which may require memory allocations shadow mode logic ensures up front that enough memory is available for the worst case requirements. Unfortunately, while page table memory is properly accounted for on the code path requiring the potential establishing of new shadows, demands by the log-dirty infrastructure were not taken into consideration. As a result, just established shadow page tables could be freed again immediately, while other code is still accessing them on the assumption that they would remain alloc
ould be freed again immediately, while other code is still accessing them on the assumption that they would remain allocated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenbits.xenproject.org/xsa/advisory-427.txt - http://xenbits.xen.org/xsa/advisory-427.html - http://www.openwall.com/lists/oss-security/2023/03/21/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APBMS2Q6746AXAFAITNJMGBNFGNMVLWR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5L6PM4RE7MUE6OWA32ZVOXCP235RM2TM/ - https://www.debian.org/security/2023/dsa-5378 - https://sec
edoraproject.org/message/5L6PM4RE7MUE6OWA32ZVOXCP235RM2TM/ - https://www.debian.org/security/2023/dsa-5378 - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42333 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-13T16:33:20.692Z Vendors: Xen Products: xen Problem Types: unknown Description: x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults which would otherwise be put in place. While not exposed to the affected guests themselves, the interface specifically exists for domains controlling such guests. This interface may therefore be used by not fully privileged
ce specifically exists for domains controlling such guests. This interface may therefore be used by not fully privileged entities, e.g. qemu running deprivileged in Dom0 or qemu running in a so called stub-domain. With this exposure it is an issue that - the number of the such controlled regions was unbounded (CVE-2022-42333), - installation and removal of such regions was not properly serialized (CVE-2022-42334). Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-428.txt - http://xenbits.xen.org/xsa/advisory-428.html - http://www.openwall.com/lists/oss-security/2023/03/21/2 - https://lists.fedoraproject.org/archives/list/package-anno
l - http://www.openwall.com/lists/oss-security/2023/03/21/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APBMS2Q6746AXAFAITNJMGBNFGNMVLWR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5L6PM4RE7MUE6OWA32ZVOXCP235RM2TM/ - https://www.debian.org/security/2023/dsa-5378 - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42334 State: PUBLISHED Published: 2023-03-21T00:00:00.000Z Last Updated: 2025-02-13T16:33:21.222Z Vendors: Xen Products: xen Problem Types: unknown Description: x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults which would otherwise be put in place. While not exposed to the affected guests themselves, the interface specifically exists for domains controlling such guests. This interface may therefore be used by not fully privileged
CVE ID: CVE-2022-42335 State: PUBLISHED Published: 2023-04-25T00:00:00 Last Updated: 2024-08-03T13:03:45.932Z Vendors: Xen Products: xen Problem Types: unknown Description: x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called shadow mode. Due to too lax a check in one of the hypervisor routines used for shadow page handling it is possible for a guest with a PCI device passed through to cause the hypervisor to access an arbitrary pointer partially under guest control. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits
pointer partially under guest control. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-430.txt - http://xenbits.xen.org/xsa/advisory-430.html - http://www.openwall.com/lists/oss-security/2023/04/25/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSPFWSY6UOPGMADQGOGN2PAAS5LJRPTG/ - https://security.gentoo.org/glsa/202402-07
CVE ID: CVE-2022-42336 State: PUBLISHED Published: 2023-05-17T00:00:00.000Z Last Updated: 2025-01-22T20:08:06.226Z Vendors: Xen Products: xen Problem Types: unknown Description: Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads require SSBD active in order to coordinate it, such logic relies on using a per-core counter of threads that have SSBD active. When running on the mentioned hardware, it's possible for a guest to under or overflow the thread co
t have SSBD active. When running on the mentioned hardware, it's possible for a guest to under or overflow the thread counter, because each write to VIRT_SPEC_CTRL.SSBD by the guest gets propagated to the helper that does the per-core active accounting. Underflowing the counter causes the value to get saturated, and thus attempts for guests running on the same core to set SSBD won't have effect because the hypervisor assumes it's already active. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://xenbits.xenproject.org/xsa/advisory-431.txt - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTO3U3WYL
ory-431.txt - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LTO3U3WYLAZW3KLPKJZ332FYUREXPZMQ/
CVE ID: CVE-2022-42337 State: REJECTED Published: N/A Last Updated: 2023-07-02T21:50:46.361982Z Description: No description available.
CVE ID: CVE-2022-42338 State: REJECTED Published: N/A Last Updated: 2023-07-02T21:50:47.011157Z Description: No description available.