Detections
Analytics
Alpine: xen: security update to 4.17.2-r1
high Tenable Cloud Security Plugin ID 407853
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance,
used when allocating guest memory to ensure any writes (such as the ones during scrubbing) have reached
memory before handing over the page to a guest. Unfortunately, the arithmetics in the helpers can overflow
and would then result to skip the cache cleaning/invalidation. Therefore there is no guarantee when all
the writes will reach the memory. (CVE-2023-34321)
- For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in
shadow paging mode. Since Xen itself needs to be mapped when PV guests run, Xen and shadowed PV guests run
directly the respective shadow page tables. For 64-bit PV guests this means running on the shadow of the
guest root page table. In the course of dealing with shortage of memory in the shadow pool associated with
a domain, shadows of page tables may be torn down. This tearing down may include the shadow root page
table that the CPU in question is presently running on. While a precaution exists to supposedly prevent
the tearing down of the underlying live page table, the time window covered by that precaution isn't large
enough. (CVE-2023-34322)
See Also
Plugin Details
Severity: High
ID: 407853
Version: Revision 1.17
Type: Local
Published: 10/31/2023
Updated: 12/19/2025
Supported Sensors: Agentless Assessment
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.12
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2023-34322
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 9/7/2023
Reference Information
CVE: CVE-2023-34321, CVE-2023-34322
IAVB: 2023-B-0067-S