VDB
CVE-2022-42310
CVE-2022-42310
PUBLISHED
Reported by xen · Published November 1, 2022
Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is committed after this situation, nodes without a valid parent can be made permanent in the data base.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Xen | xen | consult Xen advisory XSA-415 |
| Xen | xen | * |
Timeline
- Nov 1, 2022 CVE Published
- Nov 2, 2022 EPSS Score (30 in total, the first dated here)
- Aug 3, 2024 CVE Updated
- Mar 10, 2026 Distribution Patch
- Mar 10, 2026 Security Advisory (3 in total, the first dated here)
- Jun 15, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2022-42310
vulnetix vdb fixes CVE-2022-42310Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-42310/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- [oss-security] 20221101 Xen Security Advisory 415 v2 (CVE-2022-42310) - Xenstore: Guests can create orphaned Xenstore nodes mailing-list
- DSA-5272 vendor-advisory
- FEDORA-2022-07438e12df vendor-advisory
- FEDORA-2022-99af00f60e vendor-advisory
- FEDORA-2022-9f51d13fa3 vendor-advisory
- GLSA-202402-07 vendor-advisory