{"id":"UBUNTU-CVE-2022-2211","details":"A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function. This flaw leads to a denial of service, either by mistake or malicious actor.","modified":"2026-05-20T16:07:45.201464252Z","published":"2022-07-12T21:15:00Z","upstream":["CVE-2022-2211"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-2211"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2100862"},{"type":"REPORT","url":"https://listman.redhat.com/archives/libguestfs/2022-June/029274.html"},{"type":"REPORT","url":"https://listman.redhat.com/archives/libguestfs/2022-June/029277.html"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2022-2211"}],"affected":[{"package":{"name":"libguestfs","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/libguestfs?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.28.12-1ubuntu2","1:1.28.12-1ubuntu3","1:1.30.6-1ubuntu1","1:1.30.6-1ubuntu2","1:1.32.2-3ubuntu1","1:1.32.2-4ubuntu1","1:1.32.2-4ubuntu2","1:1.32.2-4ubuntu2.2"],"ecosystem_specific":{"binaries":[{"binary_name":"erlang-guestfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"gir1.2-guestfs-1.0","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"golang-guestfs-dev"},{"binary_name":"guestfsd","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"libguestfs-gfs2"},{"binary_name":"libguestfs-gobject-1.0-0","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-hfsplus","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"libguestfs-java"},{"binary_name":"libguestfs-jfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-nilfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-ocaml","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"libguestfs-perl"},{"binary_name":"libguestfs-reiserfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-rescue","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"libguestfs-rsync"},{"binary_name":"libguestfs-tools","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_name":"libguestfs-xfs","binary_version":"1:1.32.2-4ubuntu2.2"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"libguestfs-zfs"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"libguestfs0"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"lua-guestfs"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"python-guestfs"},{"binary_version":"1:1.32.2-4ubuntu2.2","binary_name":"python3-guestfs"},{"binary_name":"ruby-guestfs","binary_version":"1:1.32.2-4ubuntu2.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2211.json"}},{"package":{"name":"libguestfs","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/libguestfs?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.34.6-7ubuntu1","1:1.36.10-1ubuntu2","1:1.36.10-1ubuntu3","1:1.36.11-1ubuntu1","1:1.36.13-1ubuntu2","1:1.36.13-1ubuntu3","1:1.36.13-1ubuntu3.1","1:1.36.13-1ubuntu3.2","1:1.36.13-1ubuntu3.3"],"ecosystem_specific":{"binaries":[{"binary_name":"erlang-guestfs","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_version":"1:1.36.13-1ubuntu3.3","binary_name":"gir1.2-guestfs-1.0"},{"binary_version":"1:1.36.13-1ubuntu3.3","binary_name":"golang-guestfs-dev"},{"binary_name":"guestfsd","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_version":"1:1.36.13-1ubuntu3.3","binary_name":"libguestfs-gfs2"},{"binary_name":"libguestfs-gobject-1.0-0","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_name":"libguestfs-hfsplus","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_name":"libguestfs-java","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_version":"1:1.36.13-1ubuntu3.3","binary_name":"libguestfs-jfs"},{"binary_version":"1:1.36.13-1ubuntu3.3","binary_name":"libguestfs-nilfs"},{"binary_version":"1:1.36.13-1ubuntu3.3","binary_name":"libguestfs-ocaml"},{"binary_name":"libguestfs-perl","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_name":"libguestfs-reiserfs","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_name":"libguestfs-rescue","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_name":"libguestfs-rsync","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_name":"libguestfs-tools","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_version":"1:1.36.13-1ubuntu3.3","binary_name":"libguestfs-xfs"},{"binary_name":"libguestfs-zfs","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_version":"1:1.36.13-1ubuntu3.3","binary_name":"libguestfs0"},{"binary_name":"lua-guestfs","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_name":"php-guestfs","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_version":"1:1.36.13-1ubuntu3.3","binary_name":"python-guestfs"},{"binary_name":"python3-guestfs","binary_version":"1:1.36.13-1ubuntu3.3"},{"binary_version":"1:1.36.13-1ubuntu3.3","binary_name":"ruby-guestfs"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2211.json"}},{"package":{"name":"libguestfs","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/libguestfs?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.40.2-2ubuntu6","1:1.40.2-2ubuntu8","1:1.40.2-7ubuntu3","1:1.40.2-7ubuntu4","1:1.40.2-7ubuntu5"],"ecosystem_specific":{"binaries":[{"binary_version":"1:1.40.2-7ubuntu5","binary_name":"erlang-guestfs"},{"binary_version":"1:1.40.2-7ubuntu5","binary_name":"gir1.2-guestfs-1.0"},{"binary_name":"golang-guestfs-dev","binary_version":"1:1.40.2-7ubuntu5"},{"binary_name":"guestfsd","binary_version":"1:1.40.2-7ubuntu5"},{"binary_name":"libguestfs-gfs2","binary_version":"1:1.40.2-7ubuntu5"},{"binary_name":"libguestfs-gobject-1.0-0","binary_version":"1:1.40.2-7ubuntu5"},{"binary_name":"libguestfs-hfsplus","binary_version":"1:1.40.2-7ubuntu5"},{"binary_version":"1:1.40.2-7ubuntu5","binary_name":"libguestfs-java"},{"binary_version":"1:1.40.2-7ubuntu5","binary_name":"libguestfs-jfs"},{"binary_version":"1:1.40.2-7ubuntu5","binary_name":"libguestfs-nilfs"},{"binary_name":"libguestfs-ocaml","binary_version":"1:1.40.2-7ubuntu5"},{"binary_name":"libguestfs-perl","binary_version":"1:1.40.2-7ubuntu5"},{"binary_name":"libguestfs-reiserfs","binary_version":"1:1.40.2-7ubuntu5"},{"binary_name":"libguestfs-rescue","binary_version":"1:1.40.2-7ubuntu5"},{"binary_name":"libguestfs-rsync","binary_version":"1:1.40.2-7ubuntu5"},{"binary_version":"1:1.40.2-7ubuntu5","binary_name":"libguestfs-tools"},{"binary_name":"libguestfs-xfs","binary_version":"1:1.40.2-7ubuntu5"},{"binary_name":"libguestfs-zfs","binary_version":"1:1.40.2-7ubuntu5"},{"binary_version":"1:1.40.2-7ubuntu5","binary_name":"libguestfs0"},{"binary_name":"lua-guestfs","binary_version":"1:1.40.2-7ubuntu5"},{"binary_name":"php-guestfs","binary_version":"1:1.40.2-7ubuntu5"},{"binary_name":"python3-guestfs","binary_version":"1:1.40.2-7ubuntu5"},{"binary_name":"ruby-guestfs","binary_version":"1:1.40.2-7ubuntu5"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2211.json"}},{"package":{"name":"guestfs-tools","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/guestfs-tools?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.46.1-4ubuntu2"],"ecosystem_specific":{"binaries":[{"binary_name":"guestfs-tools","binary_version":"1.46.1-4ubuntu2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2211.json"}},{"package":{"name":"guestfs-tools","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/guestfs-tools?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.50.1-4ubuntu1","1.52.0-1ubuntu1","1.52.0-2ubuntu1","1.52.0-2ubuntu4","1.52.0-2ubuntu5"],"ecosystem_specific":{"binaries":[{"binary_version":"1.52.0-2ubuntu5","binary_name":"guestfs-tools"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2211.json"}},{"package":{"name":"guestfs-tools","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/guestfs-tools?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.52.2-4ubuntu1","1.52.3-1ubuntu1","1.52.3-1ubuntu2","1.52.3-1.1ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"guestfs-tools","binary_version":"1.52.3-1.1ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2211.json"}},{"package":{"name":"guestfs-tools","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/guestfs-tools?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.52.3-1.1ubuntu1","1.52.3-1.1ubuntu2","1.52.3-1.1ubuntu3","1.52.3-1.1ubuntu4","1.52.3-2ubuntu1","1.52.3-3ubuntu1","1.52.3-3.1ubuntu1","1.54.0-1ubuntu1","1.54.0-2ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_name":"guestfs-tools","binary_version":"1.54.0-2ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2211.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"medium"}]}