CVE-2022-33749

Published Oct 11, 2022

Last updated 9 months ago

CVSS medium 5.3

Overview

Description: XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit. This causes XAPI to be unable to accept new requests for other (trusted) clients, and blocks XAPI from carrying out any tasks that require the opening of file descriptors.
Source: security@xen.org
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.3
Impact score: 1.4
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-770

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:xen:xapi:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CC5FE9BB-705E-4705-BF39-B671ECD8AAD0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References