Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2023-34323: Xen store may crash if quota becomes negative
CVE-2023-34323 · published 2 years ago
Summary
The Xen storage service can crash when it checks a resource limit that temporarily goes below zero after a node is removed outside a transaction. This can stop virtual machine management until the service is restarted. Upgrade to a version that removes the negative‑quota check or rebuild the software with the debug flag disabled to prevent the crash.
What to do
- Update debian xen to version 4.17.2+76-ge1f9cb16e2-1~deb12u1.
- Update debian xen to version 4.17.2+55-g0b56bed864-1.
- Update xen to version 4.15.5-r3.
- Update xen to version 4.16.5-r3.
- Update xen to version 4.17.2-r3.
- Update xen xen to version 4.17.0 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | xen |
< 4.17.2+76-ge1f9cb16e2-1~deb12u1 Fix: upgrade to 4.17.2+76-ge1f9cb16e2-1~deb12u1
|
| Debian:13 | debian | xen |
< 4.17.2+55-g0b56bed864-1 Fix: upgrade to 4.17.2+55-g0b56bed864-1
|
| Debian:14 | debian | xen |
< 4.17.2+55-g0b56bed864-1 Fix: upgrade to 4.17.2+55-g0b56bed864-1
|
| Alpine:v3.15 | – | xen |
< 4.15.5-r3 Fix: upgrade to 4.15.5-r3
|
| Alpine:v3.16 | – | xen |
< 4.16.5-r3 Fix: upgrade to 4.16.5-r3
|
| Alpine:v3.18 | – | xen |
< 4.17.2-r3 Fix: upgrade to 4.17.2-r3
|
| – | xen | xen |
< 4.17.0 cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:* |
| Ubuntu:16.04:LTS | canonical | xen | All versions |
Original advisory text
When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes. It would be possible that accounting is temporarily negative if a node has...
When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes. It would be possible that accounting is temporarily negative if a node has been removed outside of the transaction. Unfortunately, some versions of C Xenstored are assuming that the quota cannot be negative and are using assert() to confirm it. This will lead to C Xenstored crash when tools are built without -DNDEBUG (this is the default).
References
- https://security-tracker.debian.org/tracker/CVE-2023-34323 Vendor Advisory
- https://security.alpinelinux.org/vuln/CVE-2023-34323 Vendor Advisory
- https://ubuntu.com/security/CVE-2023-34323 Third Party Advisory
- https://xenbits.xen.org/xsa/advisory-440.html Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-34323 Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-440.html
- https://xenbits.xenproject.org/xsa/advisory-440.html Patch Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
5.5
Medium
Type
CWE-476NULL Pointer Dereference
Timeline
Published5 Jan 2024
Updated4 Nov 2026
First seen15 Sep 2026
Sources
DEBIAN-CVE-2023-34323 · OSV
ALPINE-CVE-2023-34323 · OSV
CVE-2023-34323 · NVD
UBUNTU-CVE-2023-34323 · OSV
Track software like this
Free during beta