CVE-2022-33749 - XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit

Back Back to CVE browser

MEDIUM

XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit

Published Oct 11, 2022

5.3

MEDIUM

CVSS 3.1

EPSS 0.95%

Description

XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit. This causes XAPI to be unable to accept new requests for other (trusted) clients, and blocks XAPI from carrying out any tasks that require the opening of file descriptors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-770

Allocation of Resources Without Limits

References (4)

http://www.openwall.com/lists/oss-security/2022/10/11/4
mailing-listMailing ListPatchThird Party Advisory
http://xenbits.xen.org/xsa/advisory-413.html
PatchVendor Advisory
https://security.gentoo.org/glsa/202402-07
vendor-advisory
https://xenbits.xenproject.org/xsa/advisory-413.txt
PatchVendor Advisory

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2022/10/11/4		mailing-listMailing ListPatchThird Party Advisory
http://xenbits.xen.org/xsa/advisory-413.html		PatchVendor Advisory
https://security.gentoo.org/glsa/202402-07		vendor-advisory
https://xenbits.xenproject.org/xsa/advisory-413.txt		PatchVendor Advisory