Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-23008 State: PUBLISHED Published: 2022-01-25T19:11:19 Last Updated: 2024-08-03T03:28:42.829Z Vendors: n/a Products: NGINX Controller API Management Problem Types: CWE-94 Description: On NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access to the "user" or "admin" role can use undisclosed API endpoints on NGINX Controller API Management to inject JavaScript code that is executed on managed NGINX data plane instances. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K57735782
CVE ID: CVE-2022-23009 State: PUBLISHED Published: 2022-01-25T19:11:18 Last Updated: 2024-08-03T03:28:42.754Z Vendors: n/a Products: BIG-IQ Centralized Management Problem Types: CWE-863 Description: On BIG-IQ Centralized Management 8.x before 8.1.0, an authenticated administrative role user on a BIG-IQ managed BIG-IP device can access other BIG-IP devices managed by the same BIG-IQ system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K47592780
CVE ID: CVE-2022-23010 State: PUBLISHED Published: 2022-01-25T19:11:19 Last Updated: 2024-08-03T03:28:43.022Z Vendors: n/a Products: BIG-IP Problem Types: CWE-404 Description: On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile and an HTTP profile are configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K34360320
CVE ID: CVE-2022-23011 State: PUBLISHED Published: 2022-01-25T19:11:20 Last Updated: 2024-08-03T03:28:42.706Z Vendors: n/a Products: BIG-IP Problem Types: CWE-682 Description: On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3, virtual servers may stop responding while processing TCP traffic due to an issue in the SYN Cookie Protection feature. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K68755210
CVE ID: CVE-2022-23012 State: PUBLISHED Published: 2022-01-25T19:11:23 Last Updated: 2024-08-03T03:28:43.027Z Vendors: n/a Products: BIG-IP Problem Types: CWE-415 Description: On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K26310765
CVE ID: CVE-2022-23013 State: PUBLISHED Published: 2022-01-25T19:11:24 Last Updated: 2024-08-03T03:28:42.865Z Vendors: n/a Products: BIG-IP DNS & GTM Problem Types: CWE-79 Description: On BIG-IP DNS & GTM version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - h
ed End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K29500533
CVE ID: CVE-2022-23014 State: PUBLISHED Published: 2022-01-25T19:11:21 Last Updated: 2024-08-03T03:28:42.782Z Vendors: n/a Products: BIG-IP APM Problem Types: CWE-20 Description: On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K93526903
CVE ID: CVE-2022-23015 State: PUBLISHED Published: 2022-01-25T19:11:22 Last Updated: 2024-08-03T03:28:42.998Z Vendors: n/a Products: BIG-IP Problem Types: CWE-400 Description: On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, when a Client SSL profile is configured on a virtual server with Client Certificate Authentication set to request/require and Session Ticket enabled and configured, processing SSL traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K0
re not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K08476614
CVE ID: CVE-2022-23016 State: PUBLISHED Published: 2022-01-25T19:11:22 Last Updated: 2024-08-03T03:28:43.000Z Vendors: n/a Products: BIG-IP Problem Types: CWE-476 Description: On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K91013510
CVE ID: CVE-2022-23017 State: PUBLISHED Published: 2022-01-25T19:11:25 Last Updated: 2024-08-03T03:28:42.885Z Vendors: n/a Products: BIG-IP Problem Types: CWE-476 Description: On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DNS profile with the Rapid Response Mode setting enabled and is configured on a BIG-IP system, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/
t (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K28042514
CVE ID: CVE-2022-23018 State: PUBLISHED Published: 2022-01-25T19:11:25 Last Updated: 2024-08-03T03:28:43.049Z Vendors: n/a Products: BIG-IP AFM Problem Types: CWE-755 Description: On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and 13.1.x beginning in 13.1.3.4, when a virtual server is configured with both HTTP protocol security and HTTP Proxy Connect profiles, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K24358905
CVE ID: CVE-2022-23019 State: PUBLISHED Published: 2022-01-25T19:11:31 Last Updated: 2024-08-03T03:28:42.867Z Vendors: n/a Products: BIG-IP Problem Types: CWE-20 Description: On BIG-IP version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a message routing type virtual server is configured with both Diameter Session and Router Profiles, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K82793463
CVE ID: CVE-2022-23020 State: PUBLISHED Published: 2022-01-25T19:11:30 Last Updated: 2024-08-03T03:28:42.811Z Vendors: n/a Products: BIG-IP Problem Types: CWE-476 Description: On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K17514331
CVE ID: CVE-2022-23021 State: PUBLISHED Published: 2022-01-25T19:11:31 Last Updated: 2024-08-03T03:28:42.886Z Vendors: n/a Products: BIG-IP Problem Types: CWE-476 Description: On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate: HTTP redirect rule in an LTM policy, BIG-IP APM Access Profile, and Explicit HTTP Proxy in HTTP Profile. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K57111075
CVE ID: CVE-2022-23022 State: PUBLISHED Published: 2022-01-25T19:11:27 Last Updated: 2024-08-03T03:28:42.963Z Vendors: n/a Products: BIG-IP Problem Types: CWE-476 Description: On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K96924184
CVE ID: CVE-2022-23023 State: PUBLISHED Published: 2022-01-25T19:11:28 Last Updated: 2024-08-03T03:28:42.845Z Vendors: n/a Products: BIG-IP & BIG-IQ Problem Types: CWE-400 Description: On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, and BIG-IQ all versions of 8.x and 7.x, undisclosed requests by an authenticated iControl REST user can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K11742742
CVE ID: CVE-2022-23024 State: PUBLISHED Published: 2022-01-25T19:11:28 Last Updated: 2024-08-03T03:28:43.001Z Vendors: n/a Products: BIG-IP AFM Problem Types: CWE-400 Description: On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x, when the IPsec application layer gateway (ALG) logging profile is configured on an IPsec ALG virtual server, undisclosed IPsec traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K5489286
evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K54892865
CVE ID: CVE-2022-23025 State: PUBLISHED Published: 2022-01-25T19:11:29 Last Updated: 2024-08-03T03:28:43.078Z Vendors: n/a Products: BIG-IP Problem Types: CWE-476 Description: On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K44110411
CVE ID: CVE-2022-23026 State: PUBLISHED Published: 2022-01-25T19:11:26 Last Updated: 2024-08-03T03:28:42.891Z Vendors: n/a Products: BIG-IP ASM & Advanced WAF Problem Types: CWE-434 Description: On BIG-IP ASM & Advanced WAF version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, an authenticated user with low privileges, such as a guest, can upload data using an undisclosed REST endpoint causing an increase in disk resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K084
not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K08402414
CVE ID: CVE-2022-23027 State: PUBLISHED Published: 2022-01-25T19:11:32 Last Updated: 2024-08-03T03:28:43.018Z Vendors: n/a Products: BIG-IP Problem Types: CWE-697 Description: On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12.1.5.3-12.1.6, and 11.6.5.2, when a FastL4 profile and an HTTP, FIX, and/or hash persistence profile are configured on the same virtual server, undisclosed requests can cause the virtual server to stop processing new client connections. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/arti
oTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K30573026
CVE ID: CVE-2022-23028 State: PUBLISHED Published: 2022-01-25T19:11:35 Last Updated: 2024-08-03T03:28:43.121Z Vendors: n/a Products: BIG-IP AFM Problem Types: CWE-682 Description: On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when global AFM SYN cookie protection (TCP Half Open flood vector) is activated in the AFM Device Dos or DOS profile, certain types of TCP connections will fail. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K16101409
CVE ID: CVE-2022-23029 State: PUBLISHED Published: 2022-01-25T19:11:36 Last Updated: 2024-08-03T03:28:42.956Z Vendors: n/a Products: BIG-IP Problem Types: CWE-367 Description: On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K50343028
CVE ID: CVE-2022-23030 State: PUBLISHED Published: 2022-01-25T19:11:34 Last Updated: 2024-08-03T03:28:43.077Z Vendors: n/a Products: BIG-IP Problem Types: CWE-400 Description: On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when the BIG-IP Virtual Edition (VE) uses the ixlv driver (which is used in SR-IOV mode and requires Intel X710/XL710/XXV710 family of network adapters on the Hypervisor) and TCP Segmentation Offload configuration is enabled, undisclosed requests may cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Note
n. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K53442005
CVE ID: CVE-2022-23031 State: PUBLISHED Published: 2022-01-25T19:11:33 Last Updated: 2024-08-03T03:28:43.238Z Vendors: n/a Products: BIG-IP FPS, ASM, and Advanced WAF Problem Types: CWE-611 Description: On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4, and 14.1.x before 14.1.4.4, an XML External Entity (XXE) vulnerability exists in an undisclosed page of the F5 Advanced Web Application Firewall (Advanced WAF) and BIG-IP ASM Traffic Management User Interface (TMUI), also referred to as the Configuration utility, that allows an authenticated high-privileged attacker to read local files and force BIG-IP to send HTTP requests. Note: Software versions which
cated high-privileged attacker to read local files and force BIG-IP to send HTTP requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K61112120
CVE ID: CVE-2022-23032 State: PUBLISHED Published: 2022-01-25T19:11:34 Last Updated: 2024-08-03T03:28:43.254Z Vendors: n/a Products: BIG-IP Edge Client for Mac and Windows Problem Types: CWE-346 Description: In all versions before 7.2.1.4, when proxy settings are configured in the network access resource of a BIG-IP APM system, connecting BIG-IP Edge Client on Mac and Windows is vulnerable to a DNS rebinding attack. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K30525503
CVE ID: CVE-2022-23033 State: PUBLISHED Published: 2022-01-25T13:36:25 Last Updated: 2024-08-03T03:28:42.940Z Vendors: Xen Products: xen Problem Types: unknown Description: arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm (p2m_remove_mapping, guest_physmap_remove_page, and p2m_set_entry with mfn set to INVALID_MFN) do not actually clear the pagetable entry if the entry doesn't have the valid bit set. It is possible to have a valid pagetable entry without the valid bit set when a guest operating system uses set/way cache maintenance instructions. For instance, a guest issuing a set/way cache maintenance
operating system uses set/way cache maintenance instructions. For instance, a guest issuing a set/way cache maintenance instruction, then calling the XENMEM_decrease_reservation hypercall to give back memory pages to Xen, might be able to retain access to those pages even after Xen started reusing them for other purposes. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-393.txt - http://www.openwall.com/lists/oss-security/2022/01/25/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMR6UBGJW6JKND7IILGQ2CU35EQPF3E3/ - https://www.debian.org/security/2022/dsa-5117 - https://security.g
oject.org/message/OMR6UBGJW6JKND7IILGQ2CU35EQPF3E3/ - https://www.debian.org/security/2022/dsa-5117 - https://security.gentoo.org/glsa/202208-23
CVE ID: CVE-2022-23034 State: PUBLISHED Published: 2022-01-25T13:43:08 Last Updated: 2024-08-03T03:28:43.072Z Vendors: Xen Products: xen Problem Types: unknown Description: A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled. PV guests can request two forms of mappings. When both are in use for any individual mapping, unmapping of such a mapping can be requested in two steps. The reference count for such a mapping would then mistakenly be decremented twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check. Additional An
ted twice. Underflow of the counters gets detected, resulting in the triggering of a hypervisor bug check. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-394.txt - http://www.openwall.com/lists/oss-security/2022/01/25/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMR6UBGJW6JKND7IILGQ2CU35EQPF3E3/ - https://www.debian.org/security/2022/dsa-5117 - https://security.gentoo.org/glsa/202208-23
CVE ID: CVE-2022-23035 State: PUBLISHED Published: 2022-01-25T13:46:03 Last Updated: 2024-08-03T03:28:43.301Z Vendors: Xen Products: xen Problem Types: unknown Description: Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular when cleaning up after the guest's use of the device. In the case where an interrupt is not quiescent yet at the time this cleanup gets invoked, the cleanup attempt may be scheduled to be retried. When multiple interrupts are involved, this scheduling of a retry may get erroneously skipped. At the same time pointers may get cleared (resulting in
volved, this scheduling of a retry may get erroneously skipped. At the same time pointers may get cleared (resulting in a de-reference of NULL) and freed (resulting in a use-after-free), while other code would continue to assume them to be valid. Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-395.txt - http://www.openwall.com/lists/oss-security/2022/01/25/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMR6UBGJW6JKND7IILGQ2CU35EQPF3E3/ - https://www.debian.org/security/2022/dsa-5117 - https://security.gentoo.org/glsa/202208-23
CVE ID: CVE-2022-23036 State: PUBLISHED Published: 2022-03-10T19:20:15 Last Updated: 2024-08-03T03:28:42.946Z Vendors: unspecified Products: unspecified Problem Types: unknown Description: Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access rights of the backends in ways being subject to race conditions, resulting in potential data leaks, data corruption by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the
tion by malicious backends, and denial of service triggered by malicious backends: blkfront, netfront, scsifront and the gntalloc driver are testing whether a grant reference is still in use. If this is not the case, they assume that a following removal of the granted access will always succeed, which is not true in case the backend has mapped the granted page between those two operations. As a result the backend can keep access to the memory page of the guest no matter how the page will be used after the frontend I/O has finished. The xenbus driver has a similar problem, as it doesn't check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront
s it doesn't check the success of removing the granted access of a shared ring buffer. blkfront: CVE-2022-23036 netfront: CVE-2022-23037 scsifront: CVE-2022-23038 gntalloc: CVE-2022-23039 xenbus: CVE-2022-23040 blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls are using a functionality to delay freeing a grant reference until it is no longer in use, but the freeing of the related data page is not synchronized with dropping the granted access. As a result the backend can keep access to the memory page even after it has been freed and then re-used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the
used for a different purpose. CVE-2022-23041 netfront will fail a BUG_ON() assertion if it fails to revoke access in the rx path. This will result in a Denial of Service (DoS) situation of the guest which can be triggered by the backend. CVE-2022-23042 Additional Analyst Notes: - CVE Program Container: References: - https://xenbits.xenproject.org/xsa/advisory-396.txt - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html