vulnerability

Alpine Linux: CVE-2022-42310: Incomplete Cleanup

Severity
5
CVSS
(AV:L/AC:L/Au:S/C:N/I:N/A:C)
Published
11/01/2022
Added
03/26/2024
Modified
10/02/2024

Description

Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is committed after this situation, nodes without a valid parent can be made permanent in the data base.

Solution

alpine-linux-upgrade-xen
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.