190 lines
8.1 KiB
JSON
190 lines
8.1 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.1",
|
||
"cveMetadata": {
|
||
"state": "PUBLISHED",
|
||
"cveId": "CVE-2022-33747",
|
||
"assignerOrgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
|
||
"assignerShortName": "XEN",
|
||
"dateUpdated": "2024-08-03T08:09:22.675Z",
|
||
"dateReserved": "2022-06-15T00:00:00.000Z",
|
||
"datePublished": "2022-10-11T00:00:00.000Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"providerMetadata": {
|
||
"orgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
|
||
"shortName": "XEN",
|
||
"dateUpdated": "2024-02-04T08:07:03.069Z"
|
||
},
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's P2M (Physical-to-Machine) mapping. When large pages are in use to map guest pages in the 2nd-stage page tables, such a removal operation may incur a memory allocation (to replace a large mapping with individual smaller ones). These memory allocations are taken from the global memory pool. A malicious guest might be able to cause the global memory pool to be exhausted by manipulating its own P2M mappings."
|
||
}
|
||
],
|
||
"affected": [
|
||
{
|
||
"vendor": "Xen",
|
||
"product": "xen",
|
||
"versions": [
|
||
{
|
||
"version": "consult Xen advisory XSA-409",
|
||
"status": "unknown"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://xenbits.xenproject.org/xsa/advisory-409.txt"
|
||
},
|
||
{
|
||
"url": "http://xenbits.xen.org/xsa/advisory-409.html"
|
||
},
|
||
{
|
||
"name": "[oss-security] 20221011 Xen Security Advisory 409 v3 (CVE-2022-33747) - Arm: unbounded memory consumption for 2nd-level page tables",
|
||
"tags": [
|
||
"mailing-list"
|
||
],
|
||
"url": "http://www.openwall.com/lists/oss-security/2022/10/11/5"
|
||
},
|
||
{
|
||
"name": "FEDORA-2022-5b594b82ac",
|
||
"tags": [
|
||
"vendor-advisory"
|
||
],
|
||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWSC77GS5NATI3TT7FMVPULUPXR635XQ/"
|
||
},
|
||
{
|
||
"name": "DSA-5272",
|
||
"tags": [
|
||
"vendor-advisory"
|
||
],
|
||
"url": "https://www.debian.org/security/2022/dsa-5272"
|
||
},
|
||
{
|
||
"name": "FEDORA-2022-d80cc73088",
|
||
"tags": [
|
||
"vendor-advisory"
|
||
],
|
||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJOMUNGW6VTK5CZZRLWLVVEOUPEQBRHI/"
|
||
},
|
||
{
|
||
"name": "FEDORA-2022-99af00f60e",
|
||
"tags": [
|
||
"vendor-advisory"
|
||
],
|
||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/"
|
||
},
|
||
{
|
||
"name": "GLSA-202402-07",
|
||
"tags": [
|
||
"vendor-advisory"
|
||
],
|
||
"url": "https://security.gentoo.org/glsa/202402-07"
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"other": {
|
||
"type": "unknown",
|
||
"content": {
|
||
"description": {
|
||
"description_data": [
|
||
{
|
||
"lang": "eng",
|
||
"value": "A malicious guest could cause a Denial of Service, preventing any system\noperation requiring further allocation of Xen memory, including creating\nnew guests. NB however that memory exhaustion by itself shouldn’t cause\neither Xen or properly-written guests to crash."
|
||
}
|
||
]
|
||
}
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"type": "text",
|
||
"lang": "en",
|
||
"description": "unknown"
|
||
}
|
||
]
|
||
}
|
||
]
|
||
},
|
||
"adp": [
|
||
{
|
||
"providerMetadata": {
|
||
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
||
"shortName": "CVE",
|
||
"dateUpdated": "2024-08-03T08:09:22.675Z"
|
||
},
|
||
"title": "CVE Program Container",
|
||
"references": [
|
||
{
|
||
"url": "https://xenbits.xenproject.org/xsa/advisory-409.txt",
|
||
"tags": [
|
||
"x_transferred"
|
||
]
|
||
},
|
||
{
|
||
"url": "http://xenbits.xen.org/xsa/advisory-409.html",
|
||
"tags": [
|
||
"x_transferred"
|
||
]
|
||
},
|
||
{
|
||
"name": "[oss-security] 20221011 Xen Security Advisory 409 v3 (CVE-2022-33747) - Arm: unbounded memory consumption for 2nd-level page tables",
|
||
"tags": [
|
||
"mailing-list",
|
||
"x_transferred"
|
||
],
|
||
"url": "http://www.openwall.com/lists/oss-security/2022/10/11/5"
|
||
},
|
||
{
|
||
"name": "FEDORA-2022-5b594b82ac",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_transferred"
|
||
],
|
||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWSC77GS5NATI3TT7FMVPULUPXR635XQ/"
|
||
},
|
||
{
|
||
"name": "DSA-5272",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_transferred"
|
||
],
|
||
"url": "https://www.debian.org/security/2022/dsa-5272"
|
||
},
|
||
{
|
||
"name": "FEDORA-2022-d80cc73088",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_transferred"
|
||
],
|
||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJOMUNGW6VTK5CZZRLWLVVEOUPEQBRHI/"
|
||
},
|
||
{
|
||
"name": "FEDORA-2022-99af00f60e",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_transferred"
|
||
],
|
||
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/"
|
||
},
|
||
{
|
||
"name": "GLSA-202402-07",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_transferred"
|
||
],
|
||
"url": "https://security.gentoo.org/glsa/202402-07"
|
||
}
|
||
]
|
||
}
|
||
]
|
||
}
|
||
} |