CVE-2022-42321
Assigner: XEN
Published: 2022-11-01T00:00:00
State: PUBLISHED
descriptions: value: Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations (e.g. for deleting a sub-tree of Xenstore nodes). With sufficiently deep nesting levels this can result in stack exhaustion on xenstored, leading to a crash of xenstored.
affected: vendor: Xen
product: xen
versions: version: consult Xen advisory XSA-418
status: unknown
credits: value: {'credit_data': {'description': {'description_data': [{'lang': 'eng', 'value': 'This issue was discovered by David Vrabel of Amazon.'}]}}}
metrics: other: type: unknown
content: description: description_data: value: A malicious guest creating very deep nesting levels of Xenstore nodes
might be able to crash xenstored, resulting in a Denial of Service (DoS)
of Xenstore.

This will inhibit creation of new guests or changing the configuration of
already running guests.
problemTypes: descriptions: type: text
description: unknown