CVE-2026-23557

6.5 Moyenne

Publiée le 19/05/2026 à 16:16 · Modifiée le 14/10/2026 à 22:10 · Analysée par le NVD · Source : security@xen.org

Description

Any guest can cause xenstored to crash by issuing a XS_RESET_WATCHES command within a transaction due to an assert() triggering. In case xenstored was built with NDEBUG #defined nothing bad will happen, as assert() is doing nothing in this case. Note that the default is not to define NDEBUG for xenstored builds even in release builds of Xen.

Traduire en français

Produits concernés

Xen
Xen xen

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-617

Références

https://xenbits.xenproject.org/xsa/advisory-484.html PatchVendor Advisory
http://www.openwall.com/lists/oss-security/2026/04/28/11 Mailing ListPatchThird Party Advisory
http://xenbits.xen.org/xsa/advisory-484.html PatchVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories