CVE-2022-33749

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-10-11 · updated 2026-06-17
Weakness: CWE-770

Description

XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit. This causes XAPI to be unable to accept new requests for other (trusted) clients, and blocks XAPI from carrying out any tasks that require the opening of file descriptors.

Affected products

Xen XAPI: all versions

References

http://www.openwall.com/lists/oss-security/2022/10/11/4
http://xenbits.xen.org/xsa/advisory-413.html
https://security.gentoo.org/glsa/202402-07
https://xenbits.xenproject.org/xsa/advisory-413.txt
http://www.openwall.com/lists/oss-security/2022/10/11/4
http://xenbits.xen.org/xsa/advisory-413.html
https://security.gentoo.org/glsa/202402-07
https://xenbits.xenproject.org/xsa/advisory-413.txt

Get alerted when CVE-2022-33749 or the next vulnerability affects your stack