The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-99af00f60e advisory.

    Xenstore: Guests can crash xenstored [XSA-414, CVE-2022-42309]     Xenstore: Guests can create orphaned Xenstore nodes [XSA-415,     CVE-2022-42310]     Xenstore: guests can let run xenstored out of memory [XSA-326,     CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314,     CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318]     Xenstore: Guests can cause Xenstore to not free temporary memory     [XSA-416, CVE-2022-42319]     Xenstore: Guests can get access to Xenstore nodes of deleted domains     [XSA-417, CVE-2022-42320]     Xenstore: Guests can crash xenstored via exhausting the stack     [XSA-418, CVE-2022-42321]     Xenstore: Cooperating guests can create arbitrary numbers of nodes     [XSA-419, CVE-2022-42322, CVE-2022-42323]     Oxenstored 32->31 bit integer truncation issues [XSA-420, CVE-2022-42324]     Xenstore: Guests can create arbitrary number of nodes via transactions     [XSA-421, CVE-2022-42325, CVE-2022-42326]

    ----

    add patch to fix an incorrect backport     Arm: unbounded memory consumption for 2nd-level page tables [XSA-409,     CVE-2022-33747] (#2135268)     P2M pool freeing may take excessively long [XSA-410, CVE-2022-33746]     (#2135641)     lock order inversion in transitive grant copy handling [XSA-411,     CVE-2022-33748] (#2135263)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Fedora 35 : xen (2022-99af00f60e)

high Nessus Plugin ID 169119

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Nov 15, 2024, 1:05 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411150105
Version 1.1 Sep 8, 2023, 8:11 AM IAVM reference Plugin Feed: 202309080811
Version 1.0 Dec 22, 2022, 9:48 PM New Plugin Feed: 202212222148