[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] libfsimage contains parsing code for several filesystems, most of them based on grub-legacy code. libfsimage is used by pygrub to inspect guest disks. Pygrub runs as the same user as the toolstack (root in a priviledged domain). At least one issue has been reported to the Xen Security Team that allows an attacker to trigger a stack buffer overflow in libfsimage. After further analisys the Xen Security Team is no longer confident in the suitability of libfsimage when run against guest controlled input with super user priviledges. In order to not affect current deployments that rely on pygrub patches are provided in the resolution section of the advisory that allow running pygrub in deprivileged mode. CVE-2023-4949 refers to the original issue in the upstream grub project ("An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.") CVE-2023-34325 refers specifically to the vulnerabilities in Xen's copy of libfsimage, which is decended from a very old version of grub.
{ "binaries": [ { "binary_name": "libxen-dev", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxencall1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxendevicemodel1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxenevtchn1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxenforeignmemory1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxengnttab1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxenhypfs1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxenmisc4.16", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxenstore4", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxentoolcore1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "libxentoollog1", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-hypervisor-4.16-amd64", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-hypervisor-4.16-arm64", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-hypervisor-4.16-armhf", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-hypervisor-common", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-system-amd64", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-system-arm64", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-system-armhf", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-utils-4.16", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xen-utils-common", "binary_version": "4.16.0-1~ubuntu2.1" }, { "binary_name": "xenstore-utils", "binary_version": "4.16.0-1~ubuntu2.1" } ] }
{ "binaries": [ { "binary_name": "libxen-dev", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxencall1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxendevicemodel1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxenevtchn1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxenforeignmemory1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxengnttab1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxenhypfs1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxenmisc4.17t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxenstore4t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxentoolcore1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "libxentoollog1t64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-hypervisor-4.17-amd64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-hypervisor-4.17-arm64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-hypervisor-4.17-armhf", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-hypervisor-common", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-system-amd64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-system-arm64", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-system-armhf", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-utils-4.17", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xen-utils-common", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" }, { "binary_name": "xenstore-utils", "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3" } ] }
{ "binaries": [ { "binary_name": "libxen-dev", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxencall1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxendevicemodel1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxenevtchn1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxenforeignmemory1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxengnttab1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxenhypfs1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxenmisc4.20", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxenstore4", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxentoolcore1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "libxentoollog1", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-hypervisor-4.20-amd64", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-hypervisor-4.20-arm64", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-hypervisor-common", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-system-amd64", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-system-arm64", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-utils-4.20", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xen-utils-common", "binary_version": "4.20.0-1ubuntu1" }, { "binary_name": "xenstore-utils", "binary_version": "4.20.0-1ubuntu1" } ] }
{ "binaries": [ { "binary_name": "libxen-dev", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "libxencall1", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "libxendevicemodel1", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "libxenevtchn1", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "libxenforeignmemory1", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "libxengnttab1", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "libxenhypfs1", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "libxenmisc4.20", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "libxenstore4", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "libxentoolcore1", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "libxentoollog1", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "xen-hypervisor-4.20-amd64", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "xen-hypervisor-4.20-arm64", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "xen-hypervisor-common", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "xen-system-amd64", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "xen-system-arm64", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "xen-utils-4.20", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "xen-utils-common", "binary_version": "4.20.0+68-g35cb38b222-1" }, { "binary_name": "xenstore-utils", "binary_version": "4.20.0+68-g35cb38b222-1" } ] }
{ "binaries": [ { "binary_name": "libxen-4.6", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "libxen-dev", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "libxenstore3.0", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.4-amd64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.4-arm64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.4-armhf", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.5-amd64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.5-arm64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.5-armhf", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.6-amd64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.6-arm64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-hypervisor-4.6-armhf", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-system-amd64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-system-arm64", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-system-armhf", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-utils-4.6", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xen-utils-common", "binary_version": "4.6.5-0ubuntu1.4" }, { "binary_name": "xenstore-utils", "binary_version": "4.6.5-0ubuntu1.4" } ] }
{ "binaries": [ { "binary_name": "libxen-4.9", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "libxen-dev", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "libxenstore3.0", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.6-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.6-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.6-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.7-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.7-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.7-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.8-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.8-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.8-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.9-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.9-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-hypervisor-4.9-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-system-amd64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-system-arm64", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-system-armhf", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-utils-4.9", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xen-utils-common", "binary_version": "4.9.2-0ubuntu1" }, { "binary_name": "xenstore-utils", "binary_version": "4.9.2-0ubuntu1" } ] }
{ "binaries": [ { "binary_name": "libxen-dev", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxencall1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxendevicemodel1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxenevtchn1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxenforeignmemory1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxengnttab1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxenmisc4.11", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxenstore3.0", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxentoolcore1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "libxentoollog1", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-4.11-amd64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-4.11-arm64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-4.11-armhf", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-4.9-amd64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-4.9-arm64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-4.9-armhf", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-hypervisor-common", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-system-amd64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-system-arm64", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-system-armhf", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-utils-4.11", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xen-utils-common", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" }, { "binary_name": "xenstore-utils", "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3" } ] }