CVE-2022-33749

Name
CVE-2022-33749
Description
XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit. This causes XAPI to be unable to accept new requests for other (trusted) clients, and blocks XAPI from carrying out any tasks that require the opening of file descriptors.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://xenbits.xenproject.org/xsa/advisory-413.txt
CONFIRM http://xenbits.xen.org/xsa/advisory-413.html
MLIST http://www.openwall.com/lists/oss-security/2022/10/11/4
security@xen.org https://security.gentoo.org/glsa/202402-07

Match rules

CPE URI Source package Min version Max version
cpe:2.3:o:xen:xapi:*:*:*:*:*:*:*:* xapi == None == None

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
xen 3.14-main 4.15.4-r0 Natanael Copa <ncopa@alpinelinux.org> fixed