CVE-2022-42309

Name of the Vulnerable Software and Affected Versions Xenstore (affected versions not specified)

Description The issue is related to a bug in the fix of XSA-115, where a malicious guest can cause xenstored to use a wrong pointer during node creation in an error path. This can result in a crash of xenstored or a memory corruption in xenstored, causing further damage. The error path can be controlled by the guest, for example, by exceeding the quota value of maximum nodes per domain.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.