CVE-2022-42319

MEDIUM Year: 2022
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-401
View all →

Vulnerability Description

Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quite large amounts of memory temporarily. This memory is freed only after the request has been finished completely. A request is regarded to be finished only after the guest has read the response message of the request from the ring page. Thus a guest not reading the response can cause xenstored to not free the temporary memory. This can result in memory shortages causing Denial of Service (DoS) of xenstored.

Related Vulnerabilities

CVE-2010-2249

MEDIUM
CVSS:6.5(Medium)

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing ma...

CWE-4012010

CVE-2016-9913

MEDIUM
CVSS:6.5(Medium)

Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and p...

CWE-4012016

CVE-2016-9914

MEDIUM
CVSS:6.5(Medium)

Memory leak in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveraging a m...

CWE-4012016

CVE-2016-9915

MEDIUM
CVSS:6.5(Medium)

Memory leak in hw/9pfs/9p-handle.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leverag...

CWE-4012016

CVE-2016-9916

MEDIUM
CVSS:6.5(Medium)

Memory leak in hw/9pfs/9p-proxy.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveragi...

CWE-4012016

CVE-2017-5525

MEDIUM
CVSS:6.5(Medium)

Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of d...

CWE-4012017