GHSA-5x7q-6f7m-fc5c

GHSA-5x7q-6f7m-fc5c PUBLISHED

Record from GitHub Advisory Database · Published May 24, 2022

An issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES request, not all tracking information is freed. A guest can cause unbounded memory usage in oxenstored. This can lead to a system-wide DoS. Only systems using the Ocaml Xenstored implementation are vulnerable. Systems using the C Xenstored implementation are not vulnerable.

Timeline

May 24, 2022 CVE Published
Apr 9, 2026 Security Advisory
Apr 29, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-5x7q-6f7m-fc5c
vulnetix vdb fixes GHSA-5x7q-6f7m-fc5c

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-5x7q-6f7m-fc5c/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →