CVE-2022-42310

描述

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is committed after this situation, nodes without a valid parent can be made permanent in the data base.

如何修補 CVE-2022-42310

要修補 CVE-2022-42310,請將受影響套件升級到下列已修補版本。

• —升級至 4.15.4-r0 或更新版本

CVE-2022-42310 正在被利用嗎?

低 — EPSS 為 0.3%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• >= 4.9.0, < 4.15.4-r0

CVSS 分數

參考連結(1)

• ADVISORYsecurity.alpinelinux.org/vuln/CVE-2022-42310