Medium severity · published Oct 11, 2022
CVE-2022-33749
XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit
5.3
CVSS
1.1%
EPSS
No
On KEV
Description
XAPI open file limit DoS It is possible for an unauthenticated client on the network to cause XAPI to hit its file-descriptor limit. This causes XAPI to be unable to accept new requests for other (trusted) clients, and blocks XAPI from carrying out any tasks that require the opening of file descriptors.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XA
Xapi · Xen
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-33749
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-33749
Mailing List
http://www.openwall.com/lists/oss-security/2022/10/11/4
Patch
http://xenbits.xen.org/xsa/advisory-413.html
security.gentoo.org
https://security.gentoo.org/glsa/202402-07
Patch
https://xenbits.xenproject.org/xsa/advisory-413.txt
More from Xapi
9.4
CVE-2026-42486
Multiple RBAC issues in XAPI
9.4
CVE-2026-23562
Multiple RBAC issues in XAPI
9.4
CVE-2026-23561
Multiple RBAC issues in XAPI
9.4
CVE-2026-23560
Multiple RBAC issues in XAPI
9.4
CVE-2026-23559
Multiple RBAC issues in XAPI