Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2022-42331

Published: 21/03/2023 Updated: 04/02/2024
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 0
Subscribe to Xen

Vulnerability Summary

x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its speculation-safety actions too late. In some configurations, there is an unprotected RET instruction which can be attacked with a variety of speculative attacks.

Vulnerable Product Search on Vulmon Subscribe to Product

xen xen

fedoraproject fedora 37

fedoraproject fedora 38

Vendor Advisories

Debian CVElist Bug Report Logs: xen: CVE-2022-42331 CVE-2022-42332 CVE-2022-42333 CVE-2022-42334
Debian Bug report logs - #1033297 xen: CVE-2022-42331 CVE-2022-42332 CVE-2022-42333 CVE-2022-42334 Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 21 Mar 2023 20:24:02 UTC Severity: grave Tags: securi ...
Debian Security Advisories: DSA-5378-1 xen -- security update
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks For the stable distribution (bullseye), these problems have been fixed in version 4145+94-ge49571868d-1 We recommend that you upgrade your xen packages For the detailed security status of xen p ...

References

NVD-CWE-noinfohttps://xenbits.xenproject.org/xsa/advisory-429.txthttp://xenbits.xen.org/xsa/advisory-429.htmlhttp://www.openwall.com/lists/oss-security/2023/03/21/3https://www.debian.org/security/2023/dsa-5378https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5L6PM4RE7MUE6OWA32ZVOXCP235RM2TM/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APBMS2Q6746AXAFAITNJMGBNFGNMVLWR/https://security.gentoo.org/glsa/202402-07https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1033297https://www.debian.org/security/2023/dsa-5378https://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook