The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-07438e12df advisory.

    x86: unintended memory sharing between guests [XSA-412, CVE-2022-42327]     Xenstore: Guests can crash xenstored [XSA-414, CVE-2022-42309]     Xenstore: Guests can create orphaned Xenstore nodes [XSA-415,     CVE-2022-42310]     Xenstore: guests can let run xenstored out of memory [XSA-326,     CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314,     CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318]     Xenstore: Guests can cause Xenstore to not free temporary memory     [XSA-416, CVE-2022-42319]     Xenstore: Guests can get access to Xenstore nodes of deleted domains     [XSA-417, CVE-2022-42320]     Xenstore: Guests can crash xenstored via exhausting the stack     [XSA-418, CVE-2022-42321]     Xenstore: Cooperating guests can create arbitrary numbers of nodes     [XSA-419, CVE-2022-42322, CVE-2022-42323]     Oxenstored 32->31 bit integer truncation issues [XSA-420, CVE-2022-42324]     Xenstore: Guests can create arbitrary number of nodes via transactions     [XSA-421, CVE-2022-42325, CVE-2022-42326]

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Fedora 36 : xen (2022-07438e12df)

high Nessus Plugin ID 169223

Version 1.2

Version 1.1

Version 1.0

Version 1.2 Nov 15, 2024, 1:05 AM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411150105
Version 1.1 Sep 8, 2023, 8:11 AM IAVM reference Plugin Feed: 202309080811
Version 1.0 Dec 23, 2022, 1:53 PM New Plugin Feed: 202212231353