Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2012-4544 (GCVE-0-2012-4544)
Vulnerability from cvelistv5 – Published: 2012-10-31 16:00 – Updated: 2024-08-06 20:42
VLAI?
EPSS
Summary
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T20:42:54.912Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "SUSE-SU-2014:0470",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html"
},
{
"name": "51071",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/51071"
},
{
"name": "[oss-security] 20121026 Xen Security Advisory 25 (CVE-2012-4544) - Xen domain builder Out-of-memory due to malicious kernel/ramdisk",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2012/10/26/3"
},
{
"name": "FEDORA-2012-17408",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html"
},
{
"name": "51413",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/51413"
},
{
"name": "FEDORA-2012-17204",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html"
},
{
"name": "SUSE-SU-2012:1486",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html"
},
{
"name": "DSA-2636",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2013/dsa-2636"
},
{
"name": "xen-pvdomainbuilder-dos(79617)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79617"
},
{
"name": "FEDORA-2012-17135",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html"
},
{
"name": "56289",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/56289"
},
{
"name": "1027699",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1027699"
},
{
"name": "RHSA-2013:0241",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2013-0241.html"
},
{
"name": "openSUSE-SU-2012:1572",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"name": "86619",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/86619"
},
{
"name": "SUSE-SU-2012:1487",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html"
},
{
"name": "SUSE-SU-2014:0446",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html"
},
{
"name": "51352",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/51352"
},
{
"name": "51324",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/51324"
},
{
"name": "SUSE-SU-2014:0411",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html"
},
{
"name": "openSUSE-SU-2012:1573",
"tags": [
"vendor-advisory",
"x_refsource_SUSE",
"x_transferred"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2012-10-26T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-28T12:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "SUSE-SU-2014:0470",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html"
},
{
"name": "51071",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/51071"
},
{
"name": "[oss-security] 20121026 Xen Security Advisory 25 (CVE-2012-4544) - Xen domain builder Out-of-memory due to malicious kernel/ramdisk",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2012/10/26/3"
},
{
"name": "FEDORA-2012-17408",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html"
},
{
"name": "51413",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/51413"
},
{
"name": "FEDORA-2012-17204",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html"
},
{
"name": "SUSE-SU-2012:1486",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html"
},
{
"name": "DSA-2636",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2013/dsa-2636"
},
{
"name": "xen-pvdomainbuilder-dos(79617)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79617"
},
{
"name": "FEDORA-2012-17135",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html"
},
{
"name": "56289",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/56289"
},
{
"name": "1027699",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1027699"
},
{
"name": "RHSA-2013:0241",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2013-0241.html"
},
{
"name": "openSUSE-SU-2012:1572",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"name": "86619",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/86619"
},
{
"name": "SUSE-SU-2012:1487",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html"
},
{
"name": "SUSE-SU-2014:0446",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html"
},
{
"name": "51352",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/51352"
},
{
"name": "51324",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/51324"
},
{
"name": "SUSE-SU-2014:0411",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html"
},
{
"name": "openSUSE-SU-2012:1573",
"tags": [
"vendor-advisory",
"x_refsource_SUSE"
],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2012-4544",
"datePublished": "2012-10-31T16:00:00",
"dateReserved": "2012-08-21T00:00:00",
"dateUpdated": "2024-08-06T20:42:54.912Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"4.2.0\", \"matchCriteriaId\": \"C8257076-E3D6-469E-B7EA-FD92DE3C2F44\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0D532B60-C8DD-4A2F-9D05-E574D23EB754\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5D83CA8B-8E49-45FA-8FAB-C15052474542\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"27537DF5-7E0F-463F-BA87-46E329EE07AC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"3EA4F978-9145-4FE6-B4F9-15207E52C40A\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.\"}, {\"lang\": \"es\", \"value\": \"El PV domain builder en Xen 4.2 y anteriores, no valida el tama\\u00f1o del kernel o del ramdisk(1) antes o (2) despu\\u00e9s de la descompresi\\u00f3n, lo que permite a administradores locales de los sistemas hu\\u00e9sped provocar una denegaci\\u00f3n de servicio (consumo de memoria) a trav\\u00e9s de un (1)kernel o (2)ramdisk manipulado.\"}]",
"id": "CVE-2012-4544",
"lastModified": "2024-11-21T01:43:06.290",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:N/C:N/I:N/A:P\", \"baseScore\": 2.1, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"LOW\", \"exploitabilityScore\": 3.9, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2012-10-31T16:55:05.827",
"references": "[{\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://osvdb.org/86619\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2013-0241.html\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/51071\", \"source\": \"secalert@redhat.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/51324\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/51352\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://secunia.com/advisories/51413\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.debian.org/security/2013/dsa-2636\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2012/10/26/3\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securityfocus.com/bid/56289\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://www.securitytracker.com/id?1027699\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/79617\", \"source\": \"secalert@redhat.com\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://osvdb.org/86619\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2013-0241.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/51071\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/51324\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/51352\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/51413\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2013/dsa-2636\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2012/10/26/3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/56289\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id?1027699\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/79617\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2012-4544\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2012-10-31T16:55:05.827\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.\"},{\"lang\":\"es\",\"value\":\"El PV domain builder en Xen 4.2 y anteriores, no valida el tama\u00f1o del kernel o del ramdisk(1) antes o (2) despu\u00e9s de la descompresi\u00f3n, lo que permite a administradores locales de los sistemas hu\u00e9sped provocar una denegaci\u00f3n de servicio (consumo de memoria) a trav\u00e9s de un (1)kernel o (2)ramdisk manipulado.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":2.1,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":3.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"4.2.0\",\"matchCriteriaId\":\"C8257076-E3D6-469E-B7EA-FD92DE3C2F44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D532B60-C8DD-4A2F-9D05-E574D23EB754\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D83CA8B-8E49-45FA-8FAB-C15052474542\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27537DF5-7E0F-463F-BA87-46E329EE07AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EA4F978-9145-4FE6-B4F9-15207E52C40A\"}]}]}],\"references\":[{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://osvdb.org/86619\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0241.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/51071\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/51324\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/51352\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/51413\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.debian.org/security/2013/dsa-2636\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/10/26/3\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/56289\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securitytracker.com/id?1027699\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/79617\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://osvdb.org/86619\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0241.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/51071\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/51324\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/51352\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/51413\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2013/dsa-2636\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/10/26/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/56289\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id?1027699\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/79617\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
GSD-2012-4544
Vulnerability from gsd - Updated: 2023-12-13 01:20Details
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2012-4544",
"description": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.",
"id": "GSD-2012-4544",
"references": [
"https://www.suse.com/security/cve/CVE-2012-4544.html",
"https://www.debian.org/security/2013/dsa-2636",
"https://access.redhat.com/errata/RHSA-2013:0241",
"https://linux.oracle.com/cve/CVE-2012-4544.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2012-4544"
],
"details": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.",
"id": "GSD-2012-4544",
"modified": "2023-12-13T01:20:15.256485Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2012-4544",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
},
{
"name": "http://secunia.com/advisories/51413",
"refsource": "MISC",
"url": "http://secunia.com/advisories/51413"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html"
},
{
"name": "http://secunia.com/advisories/51324",
"refsource": "MISC",
"url": "http://secunia.com/advisories/51324"
},
{
"name": "http://secunia.com/advisories/51352",
"refsource": "MISC",
"url": "http://secunia.com/advisories/51352"
},
{
"name": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html",
"refsource": "MISC",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html"
},
{
"name": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html",
"refsource": "MISC",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html"
},
{
"name": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html",
"refsource": "MISC",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html"
},
{
"name": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html",
"refsource": "MISC",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html"
},
{
"name": "http://osvdb.org/86619",
"refsource": "MISC",
"url": "http://osvdb.org/86619"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2013-0241.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2013-0241.html"
},
{
"name": "http://secunia.com/advisories/51071",
"refsource": "MISC",
"url": "http://secunia.com/advisories/51071"
},
{
"name": "http://www.debian.org/security/2013/dsa-2636",
"refsource": "MISC",
"url": "http://www.debian.org/security/2013/dsa-2636"
},
{
"name": "http://www.openwall.com/lists/oss-security/2012/10/26/3",
"refsource": "MISC",
"url": "http://www.openwall.com/lists/oss-security/2012/10/26/3"
},
{
"name": "http://www.securityfocus.com/bid/56289",
"refsource": "MISC",
"url": "http://www.securityfocus.com/bid/56289"
},
{
"name": "http://www.securitytracker.com/id?1027699",
"refsource": "MISC",
"url": "http://www.securitytracker.com/id?1027699"
},
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79617",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79617"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "4.2.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2012-4544"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "86619",
"refsource": "OSVDB",
"tags": [],
"url": "http://osvdb.org/86619"
},
{
"name": "56289",
"refsource": "BID",
"tags": [],
"url": "http://www.securityfocus.com/bid/56289"
},
{
"name": "1027699",
"refsource": "SECTRACK",
"tags": [],
"url": "http://www.securitytracker.com/id?1027699"
},
{
"name": "[oss-security] 20121026 Xen Security Advisory 25 (CVE-2012-4544) - Xen domain builder Out-of-memory due to malicious kernel/ramdisk",
"refsource": "MLIST",
"tags": [],
"url": "http://www.openwall.com/lists/oss-security/2012/10/26/3"
},
{
"name": "51071",
"refsource": "SECUNIA",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/51071"
},
{
"name": "SUSE-SU-2012:1487",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html"
},
{
"name": "openSUSE-SU-2012:1572",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"name": "SUSE-SU-2012:1486",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html"
},
{
"name": "RHSA-2013:0241",
"refsource": "REDHAT",
"tags": [],
"url": "http://rhn.redhat.com/errata/RHSA-2013-0241.html"
},
{
"name": "DSA-2636",
"refsource": "DEBIAN",
"tags": [],
"url": "http://www.debian.org/security/2013/dsa-2636"
},
{
"name": "51352",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/51352"
},
{
"name": "51413",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/51413"
},
{
"name": "51324",
"refsource": "SECUNIA",
"tags": [],
"url": "http://secunia.com/advisories/51324"
},
{
"name": "FEDORA-2012-17408",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html"
},
{
"name": "FEDORA-2012-17135",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html"
},
{
"name": "FEDORA-2012-17204",
"refsource": "FEDORA",
"tags": [],
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html"
},
{
"name": "SUSE-SU-2014:0411",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html"
},
{
"name": "SUSE-SU-2014:0446",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html"
},
{
"name": "SUSE-SU-2014:0470",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html"
},
{
"name": "openSUSE-SU-2012:1573",
"refsource": "SUSE",
"tags": [],
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
},
{
"name": "xen-pvdomainbuilder-dos(79617)",
"refsource": "XF",
"tags": [],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79617"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"userInteractionRequired": false
}
},
"lastModifiedDate": "2017-08-29T01:32Z",
"publishedDate": "2012-10-31T16:55Z"
}
}
}
RHSA-2013:0241
Vulnerability from csaf_redhat - Published: 2013-02-07 18:53 - Updated: 2025-11-21 17:42Summary
Red Hat Security Advisory: xen security update
Notes
Topic
Updated xen packages that fix one security issue are now available for
Red Hat Enterprise Linux 5.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
Details
The xen packages contain administration tools and the xend service for
managing the kernel-xen kernel for virtualization on Red Hat Enterprise
Linux.
A flaw was found in the way libxc, the Xen control library, handled
excessively large kernel and ramdisk images when starting new guests. A
privileged guest user in a para-virtualized guest (a DomU) could create a
crafted kernel or ramdisk image that, when attempting to use it during
guest start, could result in an out-of-memory condition in the privileged
domain (the Dom0). (CVE-2012-4544)
Red Hat would like to thank the Xen project for reporting this issue.
All users of xen are advised to upgrade to these updated packages, which
correct this issue. After installing the updated packages, the xend service
must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated xen packages that fix one security issue are now available for\nRed Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The xen packages contain administration tools and the xend service for\nmanaging the kernel-xen kernel for virtualization on Red Hat Enterprise\nLinux.\n\nA flaw was found in the way libxc, the Xen control library, handled\nexcessively large kernel and ramdisk images when starting new guests. A\nprivileged guest user in a para-virtualized guest (a DomU) could create a\ncrafted kernel or ramdisk image that, when attempting to use it during\nguest start, could result in an out-of-memory condition in the privileged\ndomain (the Dom0). (CVE-2012-4544)\n\nRed Hat would like to thank the Xen project for reporting this issue.\n\nAll users of xen are advised to upgrade to these updated packages, which\ncorrect this issue. After installing the updated packages, the xend service\nmust be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2013:0241",
"url": "https://access.redhat.com/errata/RHSA-2013:0241"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "870412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=870412"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0241.json"
}
],
"title": "Red Hat Security Advisory: xen security update",
"tracking": {
"current_release_date": "2025-11-21T17:42:06+00:00",
"generator": {
"date": "2025-11-21T17:42:06+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2013:0241",
"initial_release_date": "2013-02-07T18:53:00+00:00",
"revision_history": [
{
"date": "2013-02-07T18:53:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2013-02-07T18:53:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T17:42:06+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEL Virtualization (v. 5 server)",
"product": {
"name": "RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_virtualization:5::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"product": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"product_id": "xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-libs@3.0.3-142.el5_9.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"product": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"product_id": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-debuginfo@3.0.3-142.el5_9.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xen-0:3.0.3-142.el5_9.1.x86_64",
"product": {
"name": "xen-0:3.0.3-142.el5_9.1.x86_64",
"product_id": "xen-0:3.0.3-142.el5_9.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen@3.0.3-142.el5_9.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"product": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"product_id": "xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-devel@3.0.3-142.el5_9.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-libs-0:3.0.3-142.el5_9.1.i386",
"product": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.i386",
"product_id": "xen-libs-0:3.0.3-142.el5_9.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-libs@3.0.3-142.el5_9.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"product": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"product_id": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-debuginfo@3.0.3-142.el5_9.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "xen-devel-0:3.0.3-142.el5_9.1.i386",
"product": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.i386",
"product_id": "xen-devel-0:3.0.3-142.el5_9.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-devel@3.0.3-142.el5_9.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "xen-0:3.0.3-142.el5_9.1.i386",
"product": {
"name": "xen-0:3.0.3-142.el5_9.1.i386",
"product_id": "xen-0:3.0.3-142.el5_9.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen@3.0.3-142.el5_9.1?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-libs-0:3.0.3-142.el5_9.1.ia64",
"product": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.ia64",
"product_id": "xen-libs-0:3.0.3-142.el5_9.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-libs@3.0.3-142.el5_9.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"product": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"product_id": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-debuginfo@3.0.3-142.el5_9.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "xen-0:3.0.3-142.el5_9.1.ia64",
"product": {
"name": "xen-0:3.0.3-142.el5_9.1.ia64",
"product_id": "xen-0:3.0.3-142.el5_9.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen@3.0.3-142.el5_9.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "xen-devel-0:3.0.3-142.el5_9.1.ia64",
"product": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.ia64",
"product_id": "xen-devel-0:3.0.3-142.el5_9.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-devel@3.0.3-142.el5_9.1?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-0:3.0.3-142.el5_9.1.src",
"product": {
"name": "xen-0:3.0.3-142.el5_9.1.src",
"product_id": "xen-0:3.0.3-142.el5_9.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen@3.0.3-142.el5_9.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.src"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.src",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-devel-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-devel-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-libs-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-libs-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.i386 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.ia64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.src as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.src"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.src",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.i386 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-devel-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.ia64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-devel-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.i386 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-libs-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.ia64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-libs-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Xen project"
]
}
],
"cve": "CVE-2012-4544",
"discovery_date": "2012-10-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "870412"
}
],
"notes": [
{
"category": "description",
"text": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xen: Xen domain builder Out-of-memory due to malicious kernel/ramdisk",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.src",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.src",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-4544"
},
{
"category": "external",
"summary": "RHBZ#870412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=870412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-4544",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-4544"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4544",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4544"
}
],
"release_date": "2012-10-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-07T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.src",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.src",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0241"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:L/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.src",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.src",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "xen: Xen domain builder Out-of-memory due to malicious kernel/ramdisk"
}
]
}
RHSA-2013_0241
Vulnerability from csaf_redhat - Published: 2013-02-07 18:53 - Updated: 2024-11-22 06:09Summary
Red Hat Security Advisory: xen security update
Notes
Topic
Updated xen packages that fix one security issue are now available for
Red Hat Enterprise Linux 5.
The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.
Details
The xen packages contain administration tools and the xend service for
managing the kernel-xen kernel for virtualization on Red Hat Enterprise
Linux.
A flaw was found in the way libxc, the Xen control library, handled
excessively large kernel and ramdisk images when starting new guests. A
privileged guest user in a para-virtualized guest (a DomU) could create a
crafted kernel or ramdisk image that, when attempting to use it during
guest start, could result in an out-of-memory condition in the privileged
domain (the Dom0). (CVE-2012-4544)
Red Hat would like to thank the Xen project for reporting this issue.
All users of xen are advised to upgrade to these updated packages, which
correct this issue. After installing the updated packages, the xend service
must be restarted for this update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated xen packages that fix one security issue are now available for\nRed Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The xen packages contain administration tools and the xend service for\nmanaging the kernel-xen kernel for virtualization on Red Hat Enterprise\nLinux.\n\nA flaw was found in the way libxc, the Xen control library, handled\nexcessively large kernel and ramdisk images when starting new guests. A\nprivileged guest user in a para-virtualized guest (a DomU) could create a\ncrafted kernel or ramdisk image that, when attempting to use it during\nguest start, could result in an out-of-memory condition in the privileged\ndomain (the Dom0). (CVE-2012-4544)\n\nRed Hat would like to thank the Xen project for reporting this issue.\n\nAll users of xen are advised to upgrade to these updated packages, which\ncorrect this issue. After installing the updated packages, the xend service\nmust be restarted for this update to take effect.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2013:0241",
"url": "https://access.redhat.com/errata/RHSA-2013:0241"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "870412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=870412"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0241.json"
}
],
"title": "Red Hat Security Advisory: xen security update",
"tracking": {
"current_release_date": "2024-11-22T06:09:04+00:00",
"generator": {
"date": "2024-11-22T06:09:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2013:0241",
"initial_release_date": "2013-02-07T18:53:00+00:00",
"revision_history": [
{
"date": "2013-02-07T18:53:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2013-02-07T18:53:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T06:09:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEL Virtualization (v. 5 server)",
"product": {
"name": "RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_virtualization:5::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product": {
"name": "Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"product": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"product_id": "xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-libs@3.0.3-142.el5_9.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"product": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"product_id": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-debuginfo@3.0.3-142.el5_9.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xen-0:3.0.3-142.el5_9.1.x86_64",
"product": {
"name": "xen-0:3.0.3-142.el5_9.1.x86_64",
"product_id": "xen-0:3.0.3-142.el5_9.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen@3.0.3-142.el5_9.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"product": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"product_id": "xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-devel@3.0.3-142.el5_9.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-libs-0:3.0.3-142.el5_9.1.i386",
"product": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.i386",
"product_id": "xen-libs-0:3.0.3-142.el5_9.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-libs@3.0.3-142.el5_9.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"product": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"product_id": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-debuginfo@3.0.3-142.el5_9.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "xen-devel-0:3.0.3-142.el5_9.1.i386",
"product": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.i386",
"product_id": "xen-devel-0:3.0.3-142.el5_9.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-devel@3.0.3-142.el5_9.1?arch=i386"
}
}
},
{
"category": "product_version",
"name": "xen-0:3.0.3-142.el5_9.1.i386",
"product": {
"name": "xen-0:3.0.3-142.el5_9.1.i386",
"product_id": "xen-0:3.0.3-142.el5_9.1.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen@3.0.3-142.el5_9.1?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-libs-0:3.0.3-142.el5_9.1.ia64",
"product": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.ia64",
"product_id": "xen-libs-0:3.0.3-142.el5_9.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-libs@3.0.3-142.el5_9.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"product": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"product_id": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-debuginfo@3.0.3-142.el5_9.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "xen-0:3.0.3-142.el5_9.1.ia64",
"product": {
"name": "xen-0:3.0.3-142.el5_9.1.ia64",
"product_id": "xen-0:3.0.3-142.el5_9.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen@3.0.3-142.el5_9.1?arch=ia64"
}
}
},
{
"category": "product_version",
"name": "xen-devel-0:3.0.3-142.el5_9.1.ia64",
"product": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.ia64",
"product_id": "xen-devel-0:3.0.3-142.el5_9.1.ia64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen-devel@3.0.3-142.el5_9.1?arch=ia64"
}
}
}
],
"category": "architecture",
"name": "ia64"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-0:3.0.3-142.el5_9.1.src",
"product": {
"name": "xen-0:3.0.3-142.el5_9.1.src",
"product_id": "xen-0:3.0.3-142.el5_9.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/xen@3.0.3-142.el5_9.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.src as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.src"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.src",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-devel-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-devel-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-libs-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-libs-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
"product_id": "5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.i386 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.ia64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.src as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.src"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.src",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-0:3.0.3-142.el5_9.1.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.i386 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-devel-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.ia64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-devel-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-0:3.0.3-142.el5_9.1.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.i386 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386"
},
"product_reference": "xen-libs-0:3.0.3-142.el5_9.1.i386",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.ia64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64"
},
"product_reference": "xen-libs-0:3.0.3-142.el5_9.1.ia64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-0:3.0.3-142.el5_9.1.x86_64 as a component of RHEL Virtualization (v. 5 server)",
"product_id": "5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64"
},
"product_reference": "xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"relates_to_product_reference": "5Server-VT-5.9.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Xen project"
]
}
],
"cve": "CVE-2012-4544",
"discovery_date": "2012-10-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "870412"
}
],
"notes": [
{
"category": "description",
"text": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xen: Xen domain builder Out-of-memory due to malicious kernel/ramdisk",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.src",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.src",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-4544"
},
{
"category": "external",
"summary": "RHBZ#870412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=870412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-4544",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-4544"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4544",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4544"
}
],
"release_date": "2012-10-26T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2013-02-07T18:53:00+00:00",
"details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.src",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.src",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2013:0241"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.7,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:L/Au:S/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.src",
"5Server-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64",
"5Server-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.src",
"5Server-VT-5.9.Z:xen-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-debuginfo-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-devel-0:3.0.3-142.el5_9.1.x86_64",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.i386",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.ia64",
"5Server-VT-5.9.Z:xen-libs-0:3.0.3-142.el5_9.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "xen: Xen domain builder Out-of-memory due to malicious kernel/ramdisk"
}
]
}
FKIE_CVE-2012-4544
Vulnerability from fkie_nvd - Published: 2012-10-31 16:55 - Updated: 2025-04-11 00:51
Severity ?
Summary
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
References
| URL | Tags | ||
|---|---|---|---|
| secalert@redhat.com | http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html | ||
| secalert@redhat.com | http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html | ||
| secalert@redhat.com | http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html | ||
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html | ||
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html | ||
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html | ||
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html | ||
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html | ||
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html | ||
| secalert@redhat.com | http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html | ||
| secalert@redhat.com | http://osvdb.org/86619 | ||
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2013-0241.html | ||
| secalert@redhat.com | http://secunia.com/advisories/51071 | Vendor Advisory | |
| secalert@redhat.com | http://secunia.com/advisories/51324 | ||
| secalert@redhat.com | http://secunia.com/advisories/51352 | ||
| secalert@redhat.com | http://secunia.com/advisories/51413 | ||
| secalert@redhat.com | http://www.debian.org/security/2013/dsa-2636 | ||
| secalert@redhat.com | http://www.openwall.com/lists/oss-security/2012/10/26/3 | ||
| secalert@redhat.com | http://www.securityfocus.com/bid/56289 | ||
| secalert@redhat.com | http://www.securitytracker.com/id?1027699 | ||
| secalert@redhat.com | https://exchange.xforce.ibmcloud.com/vulnerabilities/79617 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://osvdb.org/86619 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2013-0241.html | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/51071 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/51324 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/51352 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://secunia.com/advisories/51413 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2013/dsa-2636 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2012/10/26/3 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/56289 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id?1027699 | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://exchange.xforce.ibmcloud.com/vulnerabilities/79617 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C8257076-E3D6-469E-B7EA-FD92DE3C2F44",
"versionEndIncluding": "4.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0D532B60-C8DD-4A2F-9D05-E574D23EB754",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5D83CA8B-8E49-45FA-8FAB-C15052474542",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*",
"matchCriteriaId": "27537DF5-7E0F-463F-BA87-46E329EE07AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "3EA4F978-9145-4FE6-B4F9-15207E52C40A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk."
},
{
"lang": "es",
"value": "El PV domain builder en Xen 4.2 y anteriores, no valida el tama\u00f1o del kernel o del ramdisk(1) antes o (2) despu\u00e9s de la descompresi\u00f3n, lo que permite a administradores locales de los sistemas hu\u00e9sped provocar una denegaci\u00f3n de servicio (consumo de memoria) a trav\u00e9s de un (1)kernel o (2)ramdisk manipulado."
}
],
"id": "CVE-2012-4544",
"lastModified": "2025-04-11T00:51:21.963",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
]
},
"published": "2012-10-31T16:55:05.827",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html"
},
{
"source": "secalert@redhat.com",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html"
},
{
"source": "secalert@redhat.com",
"url": "http://osvdb.org/86619"
},
{
"source": "secalert@redhat.com",
"url": "http://rhn.redhat.com/errata/RHSA-2013-0241.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/51071"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/51324"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/51352"
},
{
"source": "secalert@redhat.com",
"url": "http://secunia.com/advisories/51413"
},
{
"source": "secalert@redhat.com",
"url": "http://www.debian.org/security/2013/dsa-2636"
},
{
"source": "secalert@redhat.com",
"url": "http://www.openwall.com/lists/oss-security/2012/10/26/3"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securityfocus.com/bid/56289"
},
{
"source": "secalert@redhat.com",
"url": "http://www.securitytracker.com/id?1027699"
},
{
"source": "secalert@redhat.com",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79617"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://osvdb.org/86619"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://rhn.redhat.com/errata/RHSA-2013-0241.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/51071"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/51324"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/51352"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/51413"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.debian.org/security/2013/dsa-2636"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.openwall.com/lists/oss-security/2012/10/26/3"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/56289"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securitytracker.com/id?1027699"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79617"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-5VGR-8HW2-WP3H
Vulnerability from github – Published: 2022-05-17 01:41 – Updated: 2022-05-17 01:41
VLAI?
Details
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.
{
"affected": [],
"aliases": [
"CVE-2012-4544"
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2012-10-31T16:55:00Z",
"severity": "LOW"
},
"details": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.",
"id": "GHSA-5vgr-8hw2-wp3h",
"modified": "2022-05-17T01:41:58Z",
"published": "2022-05-17T01:41:58Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4544"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/79617"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091832.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091844.html"
},
{
"type": "WEB",
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092050.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html"
},
{
"type": "WEB",
"url": "http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html"
},
{
"type": "WEB",
"url": "http://osvdb.org/86619"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2013-0241.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/51071"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/51324"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/51352"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/51413"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2013/dsa-2636"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2012/10/26/3"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/56289"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id?1027699"
}
],
"schema_version": "1.4.0",
"severity": []
}
OPENSUSE-SU-2024:10196-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
xen-4.7.0_12-1.3 on GA media
Notes
Title of the patch
xen-4.7.0_12-1.3 on GA media
Description of the patch
These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-10196
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "xen-4.7.0_12-1.3 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-10196",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10196-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2011-1898 page",
"url": "https://www.suse.com/security/cve/CVE-2011-1898/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-0029 page",
"url": "https://www.suse.com/security/cve/CVE-2012-0029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-0217 page",
"url": "https://www.suse.com/security/cve/CVE-2012-0217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-2625 page",
"url": "https://www.suse.com/security/cve/CVE-2012-2625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-3432 page",
"url": "https://www.suse.com/security/cve/CVE-2012-3432/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-3433 page",
"url": "https://www.suse.com/security/cve/CVE-2012-3433/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-4411 page",
"url": "https://www.suse.com/security/cve/CVE-2012-4411/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-4535 page",
"url": "https://www.suse.com/security/cve/CVE-2012-4535/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-4536 page",
"url": "https://www.suse.com/security/cve/CVE-2012-4536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-4537 page",
"url": "https://www.suse.com/security/cve/CVE-2012-4537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-4538 page",
"url": "https://www.suse.com/security/cve/CVE-2012-4538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-4539 page",
"url": "https://www.suse.com/security/cve/CVE-2012-4539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-4544 page",
"url": "https://www.suse.com/security/cve/CVE-2012-4544/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5510 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5510/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5511 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5511/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5513 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5513/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5514 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5514/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5515 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5515/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5525 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5525/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-5634 page",
"url": "https://www.suse.com/security/cve/CVE-2012-5634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2012-6075 page",
"url": "https://www.suse.com/security/cve/CVE-2012-6075/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0151 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0152 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0152/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-0153 page",
"url": "https://www.suse.com/security/cve/CVE-2013-0153/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1442 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1442/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1917 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1918 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1918/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1919 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1919/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1922 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-1952 page",
"url": "https://www.suse.com/security/cve/CVE-2013-1952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-2007 page",
"url": "https://www.suse.com/security/cve/CVE-2013-2007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-3495 page",
"url": "https://www.suse.com/security/cve/CVE-2013-3495/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4355 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4355/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4356 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4361 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4361/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4375 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4375/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4416 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4416/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4494 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4494/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4533 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4534 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4537 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4538 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4539 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4540 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4540/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4551 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4553 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4553/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4554 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4554/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0222 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3124 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3124/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3640 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3640/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3672 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3672/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-5146 page",
"url": "https://www.suse.com/security/cve/CVE-2014-5146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-5149 page",
"url": "https://www.suse.com/security/cve/CVE-2014-5149/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-6268 page",
"url": "https://www.suse.com/security/cve/CVE-2014-6268/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7154 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7155 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7156 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7188 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7815 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1779 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3259 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3259/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3340 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3340/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3456 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3456/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4037 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4037/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4103 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4104 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4104/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4105 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-4106 page",
"url": "https://www.suse.com/security/cve/CVE-2015-4106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5154 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5239 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5278 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5278/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5307 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5307/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6815 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6855 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7311 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7311/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7504 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7512 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7549 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7835 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7969 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7969/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7970 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7970/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7971 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7972 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8104 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8104/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8339 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8339/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8340 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8340/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8341 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8341/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8345 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8504 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8550 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8550/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8554 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8554/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8555 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8555/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8558 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8567 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8568 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8613 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8615 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8619 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8743 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8744 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8744/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8745 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1568 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1570 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1571 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1714 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1922 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1981 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2198 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2270 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2270/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2271 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2271/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2391 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2392 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2538 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4439 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4441 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5238 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5238/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-5338 page",
"url": "https://www.suse.com/security/cve/CVE-2016-5338/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6258 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6258/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6259 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6259/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-6351 page",
"url": "https://www.suse.com/security/cve/CVE-2016-6351/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7092 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7092/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7093 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7093/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-7094 page",
"url": "https://www.suse.com/security/cve/CVE-2016-7094/"
}
],
"title": "xen-4.7.0_12-1.3 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:10196-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xen-4.7.0_12-1.3.aarch64",
"product": {
"name": "xen-4.7.0_12-1.3.aarch64",
"product_id": "xen-4.7.0_12-1.3.aarch64"
}
},
{
"category": "product_version",
"name": "xen-devel-4.7.0_12-1.3.aarch64",
"product": {
"name": "xen-devel-4.7.0_12-1.3.aarch64",
"product_id": "xen-devel-4.7.0_12-1.3.aarch64"
}
},
{
"category": "product_version",
"name": "xen-doc-html-4.7.0_12-1.3.aarch64",
"product": {
"name": "xen-doc-html-4.7.0_12-1.3.aarch64",
"product_id": "xen-doc-html-4.7.0_12-1.3.aarch64"
}
},
{
"category": "product_version",
"name": "xen-libs-4.7.0_12-1.3.aarch64",
"product": {
"name": "xen-libs-4.7.0_12-1.3.aarch64",
"product_id": "xen-libs-4.7.0_12-1.3.aarch64"
}
},
{
"category": "product_version",
"name": "xen-libs-32bit-4.7.0_12-1.3.aarch64",
"product": {
"name": "xen-libs-32bit-4.7.0_12-1.3.aarch64",
"product_id": "xen-libs-32bit-4.7.0_12-1.3.aarch64"
}
},
{
"category": "product_version",
"name": "xen-tools-4.7.0_12-1.3.aarch64",
"product": {
"name": "xen-tools-4.7.0_12-1.3.aarch64",
"product_id": "xen-tools-4.7.0_12-1.3.aarch64"
}
},
{
"category": "product_version",
"name": "xen-tools-domU-4.7.0_12-1.3.aarch64",
"product": {
"name": "xen-tools-domU-4.7.0_12-1.3.aarch64",
"product_id": "xen-tools-domU-4.7.0_12-1.3.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-4.7.0_12-1.3.ppc64le",
"product": {
"name": "xen-4.7.0_12-1.3.ppc64le",
"product_id": "xen-4.7.0_12-1.3.ppc64le"
}
},
{
"category": "product_version",
"name": "xen-devel-4.7.0_12-1.3.ppc64le",
"product": {
"name": "xen-devel-4.7.0_12-1.3.ppc64le",
"product_id": "xen-devel-4.7.0_12-1.3.ppc64le"
}
},
{
"category": "product_version",
"name": "xen-doc-html-4.7.0_12-1.3.ppc64le",
"product": {
"name": "xen-doc-html-4.7.0_12-1.3.ppc64le",
"product_id": "xen-doc-html-4.7.0_12-1.3.ppc64le"
}
},
{
"category": "product_version",
"name": "xen-libs-4.7.0_12-1.3.ppc64le",
"product": {
"name": "xen-libs-4.7.0_12-1.3.ppc64le",
"product_id": "xen-libs-4.7.0_12-1.3.ppc64le"
}
},
{
"category": "product_version",
"name": "xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"product": {
"name": "xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"product_id": "xen-libs-32bit-4.7.0_12-1.3.ppc64le"
}
},
{
"category": "product_version",
"name": "xen-tools-4.7.0_12-1.3.ppc64le",
"product": {
"name": "xen-tools-4.7.0_12-1.3.ppc64le",
"product_id": "xen-tools-4.7.0_12-1.3.ppc64le"
}
},
{
"category": "product_version",
"name": "xen-tools-domU-4.7.0_12-1.3.ppc64le",
"product": {
"name": "xen-tools-domU-4.7.0_12-1.3.ppc64le",
"product_id": "xen-tools-domU-4.7.0_12-1.3.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-4.7.0_12-1.3.s390x",
"product": {
"name": "xen-4.7.0_12-1.3.s390x",
"product_id": "xen-4.7.0_12-1.3.s390x"
}
},
{
"category": "product_version",
"name": "xen-devel-4.7.0_12-1.3.s390x",
"product": {
"name": "xen-devel-4.7.0_12-1.3.s390x",
"product_id": "xen-devel-4.7.0_12-1.3.s390x"
}
},
{
"category": "product_version",
"name": "xen-doc-html-4.7.0_12-1.3.s390x",
"product": {
"name": "xen-doc-html-4.7.0_12-1.3.s390x",
"product_id": "xen-doc-html-4.7.0_12-1.3.s390x"
}
},
{
"category": "product_version",
"name": "xen-libs-4.7.0_12-1.3.s390x",
"product": {
"name": "xen-libs-4.7.0_12-1.3.s390x",
"product_id": "xen-libs-4.7.0_12-1.3.s390x"
}
},
{
"category": "product_version",
"name": "xen-libs-32bit-4.7.0_12-1.3.s390x",
"product": {
"name": "xen-libs-32bit-4.7.0_12-1.3.s390x",
"product_id": "xen-libs-32bit-4.7.0_12-1.3.s390x"
}
},
{
"category": "product_version",
"name": "xen-tools-4.7.0_12-1.3.s390x",
"product": {
"name": "xen-tools-4.7.0_12-1.3.s390x",
"product_id": "xen-tools-4.7.0_12-1.3.s390x"
}
},
{
"category": "product_version",
"name": "xen-tools-domU-4.7.0_12-1.3.s390x",
"product": {
"name": "xen-tools-domU-4.7.0_12-1.3.s390x",
"product_id": "xen-tools-domU-4.7.0_12-1.3.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-4.7.0_12-1.3.x86_64",
"product": {
"name": "xen-4.7.0_12-1.3.x86_64",
"product_id": "xen-4.7.0_12-1.3.x86_64"
}
},
{
"category": "product_version",
"name": "xen-devel-4.7.0_12-1.3.x86_64",
"product": {
"name": "xen-devel-4.7.0_12-1.3.x86_64",
"product_id": "xen-devel-4.7.0_12-1.3.x86_64"
}
},
{
"category": "product_version",
"name": "xen-doc-html-4.7.0_12-1.3.x86_64",
"product": {
"name": "xen-doc-html-4.7.0_12-1.3.x86_64",
"product_id": "xen-doc-html-4.7.0_12-1.3.x86_64"
}
},
{
"category": "product_version",
"name": "xen-libs-4.7.0_12-1.3.x86_64",
"product": {
"name": "xen-libs-4.7.0_12-1.3.x86_64",
"product_id": "xen-libs-4.7.0_12-1.3.x86_64"
}
},
{
"category": "product_version",
"name": "xen-libs-32bit-4.7.0_12-1.3.x86_64",
"product": {
"name": "xen-libs-32bit-4.7.0_12-1.3.x86_64",
"product_id": "xen-libs-32bit-4.7.0_12-1.3.x86_64"
}
},
{
"category": "product_version",
"name": "xen-tools-4.7.0_12-1.3.x86_64",
"product": {
"name": "xen-tools-4.7.0_12-1.3.x86_64",
"product_id": "xen-tools-4.7.0_12-1.3.x86_64"
}
},
{
"category": "product_version",
"name": "xen-tools-domU-4.7.0_12-1.3.x86_64",
"product": {
"name": "xen-tools-domU-4.7.0_12-1.3.x86_64",
"product_id": "xen-tools-domU-4.7.0_12-1.3.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.7.0_12-1.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64"
},
"product_reference": "xen-4.7.0_12-1.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.7.0_12-1.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le"
},
"product_reference": "xen-4.7.0_12-1.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.7.0_12-1.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x"
},
"product_reference": "xen-4.7.0_12-1.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.7.0_12-1.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64"
},
"product_reference": "xen-4.7.0_12-1.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-4.7.0_12-1.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64"
},
"product_reference": "xen-devel-4.7.0_12-1.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-4.7.0_12-1.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le"
},
"product_reference": "xen-devel-4.7.0_12-1.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-4.7.0_12-1.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x"
},
"product_reference": "xen-devel-4.7.0_12-1.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-4.7.0_12-1.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64"
},
"product_reference": "xen-devel-4.7.0_12-1.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.7.0_12-1.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64"
},
"product_reference": "xen-doc-html-4.7.0_12-1.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.7.0_12-1.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le"
},
"product_reference": "xen-doc-html-4.7.0_12-1.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.7.0_12-1.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x"
},
"product_reference": "xen-doc-html-4.7.0_12-1.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.7.0_12-1.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64"
},
"product_reference": "xen-doc-html-4.7.0_12-1.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.7.0_12-1.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64"
},
"product_reference": "xen-libs-4.7.0_12-1.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.7.0_12-1.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le"
},
"product_reference": "xen-libs-4.7.0_12-1.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.7.0_12-1.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x"
},
"product_reference": "xen-libs-4.7.0_12-1.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.7.0_12-1.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64"
},
"product_reference": "xen-libs-4.7.0_12-1.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.7.0_12-1.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64"
},
"product_reference": "xen-libs-32bit-4.7.0_12-1.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.7.0_12-1.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le"
},
"product_reference": "xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.7.0_12-1.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x"
},
"product_reference": "xen-libs-32bit-4.7.0_12-1.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.7.0_12-1.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64"
},
"product_reference": "xen-libs-32bit-4.7.0_12-1.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.7.0_12-1.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64"
},
"product_reference": "xen-tools-4.7.0_12-1.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.7.0_12-1.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le"
},
"product_reference": "xen-tools-4.7.0_12-1.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.7.0_12-1.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x"
},
"product_reference": "xen-tools-4.7.0_12-1.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.7.0_12-1.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64"
},
"product_reference": "xen-tools-4.7.0_12-1.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.7.0_12-1.3.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64"
},
"product_reference": "xen-tools-domU-4.7.0_12-1.3.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.7.0_12-1.3.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le"
},
"product_reference": "xen-tools-domU-4.7.0_12-1.3.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.7.0_12-1.3.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x"
},
"product_reference": "xen-tools-domU-4.7.0_12-1.3.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.7.0_12-1.3.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
},
"product_reference": "xen-tools-domU-4.7.0_12-1.3.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2011-1898",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2011-1898"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by \"using DMA to generate MSI interrupts by writing to the interrupt injection registers.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2011-1898",
"url": "https://www.suse.com/security/cve/CVE-2011-1898"
},
{
"category": "external",
"summary": "SUSE Bug 702025 for CVE-2011-1898",
"url": "https://bugzilla.suse.com/702025"
},
{
"category": "external",
"summary": "SUSE Bug 724906 for CVE-2011-1898",
"url": "https://bugzilla.suse.com/724906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2011-1898"
},
{
"cve": "CVE-2012-0029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-0029"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-0029",
"url": "https://www.suse.com/security/cve/CVE-2012-0029"
},
{
"category": "external",
"summary": "SUSE Bug 740165 for CVE-2012-0029",
"url": "https://bugzilla.suse.com/740165"
},
{
"category": "external",
"summary": "SUSE Bug 747331 for CVE-2012-0029",
"url": "https://bugzilla.suse.com/747331"
},
{
"category": "external",
"summary": "SUSE Bug 757537 for CVE-2012-0029",
"url": "https://bugzilla.suse.com/757537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-0029"
},
{
"cve": "CVE-2012-0217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-0217"
}
],
"notes": [
{
"category": "general",
"text": "The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1; and possibly other operating systems, when running on an Intel processor, incorrectly uses the sysret path in cases where a certain address is not a canonical address, which allows local users to gain privileges via a crafted application. NOTE: because this issue is due to incorrect use of the Intel specification, it should have been split into separate identifiers; however, there was some value in preserving the original mapping of the multi-codebase coordinated-disclosure effort to a single identifier.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-0217",
"url": "https://www.suse.com/security/cve/CVE-2012-0217"
},
{
"category": "external",
"summary": "SUSE Bug 757537 for CVE-2012-0217",
"url": "https://bugzilla.suse.com/757537"
},
{
"category": "external",
"summary": "SUSE Bug 764077 for CVE-2012-0217",
"url": "https://bugzilla.suse.com/764077"
},
{
"category": "external",
"summary": "SUSE Bug 785429 for CVE-2012-0217",
"url": "https://bugzilla.suse.com/785429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-0217"
},
{
"cve": "CVE-2012-2625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-2625"
}
],
"notes": [
{
"category": "general",
"text": "The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1) bzip2 or (2) lzma compressed kernel image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-2625",
"url": "https://www.suse.com/security/cve/CVE-2012-2625"
},
{
"category": "external",
"summary": "SUSE Bug 762484 for CVE-2012-2625",
"url": "https://bugzilla.suse.com/762484"
},
{
"category": "external",
"summary": "SUSE Bug 773393 for CVE-2012-2625",
"url": "https://bugzilla.suse.com/773393"
},
{
"category": "external",
"summary": "SUSE Bug 773401 for CVE-2012-2625",
"url": "https://bugzilla.suse.com/773401"
},
{
"category": "external",
"summary": "SUSE Bug 787163 for CVE-2012-2625",
"url": "https://bugzilla.suse.com/787163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2012-2625"
},
{
"cve": "CVE-2012-3432",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-3432"
}
],
"notes": [
{
"category": "general",
"text": "The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-3432",
"url": "https://www.suse.com/security/cve/CVE-2012-3432"
},
{
"category": "external",
"summary": "SUSE Bug 773393 for CVE-2012-3432",
"url": "https://bugzilla.suse.com/773393"
},
{
"category": "external",
"summary": "SUSE Bug 773401 for CVE-2012-3432",
"url": "https://bugzilla.suse.com/773401"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2012-3432"
},
{
"cve": "CVE-2012-3433",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-3433"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-3433",
"url": "https://www.suse.com/security/cve/CVE-2012-3433"
},
{
"category": "external",
"summary": "SUSE Bug 773393 for CVE-2012-3433",
"url": "https://bugzilla.suse.com/773393"
},
{
"category": "external",
"summary": "SUSE Bug 773401 for CVE-2012-3433",
"url": "https://bugzilla.suse.com/773401"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-3433"
},
{
"cve": "CVE-2012-4411",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-4411"
}
],
"notes": [
{
"category": "general",
"text": "The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-4411",
"url": "https://www.suse.com/security/cve/CVE-2012-4411"
},
{
"category": "external",
"summary": "SUSE Bug 779212 for CVE-2012-4411",
"url": "https://bugzilla.suse.com/779212"
},
{
"category": "external",
"summary": "SUSE Bug 786516 for CVE-2012-4411",
"url": "https://bugzilla.suse.com/786516"
},
{
"category": "external",
"summary": "SUSE Bug 786518 for CVE-2012-4411",
"url": "https://bugzilla.suse.com/786518"
},
{
"category": "external",
"summary": "SUSE Bug 786519 for CVE-2012-4411",
"url": "https://bugzilla.suse.com/786519"
},
{
"category": "external",
"summary": "SUSE Bug 786520 for CVE-2012-4411",
"url": "https://bugzilla.suse.com/786520"
},
{
"category": "external",
"summary": "SUSE Bug 787163 for CVE-2012-4411",
"url": "https://bugzilla.suse.com/787163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2012-4411"
},
{
"cve": "CVE-2012-4535",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-4535"
}
],
"notes": [
{
"category": "general",
"text": "Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an \"inappropriate deadline.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-4535",
"url": "https://www.suse.com/security/cve/CVE-2012-4535"
},
{
"category": "external",
"summary": "SUSE Bug 779212 for CVE-2012-4535",
"url": "https://bugzilla.suse.com/779212"
},
{
"category": "external",
"summary": "SUSE Bug 786516 for CVE-2012-4535",
"url": "https://bugzilla.suse.com/786516"
},
{
"category": "external",
"summary": "SUSE Bug 786518 for CVE-2012-4535",
"url": "https://bugzilla.suse.com/786518"
},
{
"category": "external",
"summary": "SUSE Bug 786519 for CVE-2012-4535",
"url": "https://bugzilla.suse.com/786519"
},
{
"category": "external",
"summary": "SUSE Bug 786520 for CVE-2012-4535",
"url": "https://bugzilla.suse.com/786520"
},
{
"category": "external",
"summary": "SUSE Bug 787163 for CVE-2012-4535",
"url": "https://bugzilla.suse.com/787163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-4535"
},
{
"cve": "CVE-2012-4536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-4536"
}
],
"notes": [
{
"category": "general",
"text": "The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service (Xen crash) via a crafted pirq value that triggers an out-of-bounds read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-4536",
"url": "https://www.suse.com/security/cve/CVE-2012-4536"
},
{
"category": "external",
"summary": "SUSE Bug 779212 for CVE-2012-4536",
"url": "https://bugzilla.suse.com/779212"
},
{
"category": "external",
"summary": "SUSE Bug 786516 for CVE-2012-4536",
"url": "https://bugzilla.suse.com/786516"
},
{
"category": "external",
"summary": "SUSE Bug 786518 for CVE-2012-4536",
"url": "https://bugzilla.suse.com/786518"
},
{
"category": "external",
"summary": "SUSE Bug 786519 for CVE-2012-4536",
"url": "https://bugzilla.suse.com/786519"
},
{
"category": "external",
"summary": "SUSE Bug 786520 for CVE-2012-4536",
"url": "https://bugzilla.suse.com/786520"
},
{
"category": "external",
"summary": "SUSE Bug 787163 for CVE-2012-4536",
"url": "https://bugzilla.suse.com/787163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-4536"
},
{
"cve": "CVE-2012-4537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-4537"
}
],
"notes": [
{
"category": "general",
"text": "Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka \"Memory mapping failure DoS vulnerability.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-4537",
"url": "https://www.suse.com/security/cve/CVE-2012-4537"
},
{
"category": "external",
"summary": "SUSE Bug 779212 for CVE-2012-4537",
"url": "https://bugzilla.suse.com/779212"
},
{
"category": "external",
"summary": "SUSE Bug 786516 for CVE-2012-4537",
"url": "https://bugzilla.suse.com/786516"
},
{
"category": "external",
"summary": "SUSE Bug 786517 for CVE-2012-4537",
"url": "https://bugzilla.suse.com/786517"
},
{
"category": "external",
"summary": "SUSE Bug 786518 for CVE-2012-4537",
"url": "https://bugzilla.suse.com/786518"
},
{
"category": "external",
"summary": "SUSE Bug 786519 for CVE-2012-4537",
"url": "https://bugzilla.suse.com/786519"
},
{
"category": "external",
"summary": "SUSE Bug 786520 for CVE-2012-4537",
"url": "https://bugzilla.suse.com/786520"
},
{
"category": "external",
"summary": "SUSE Bug 787163 for CVE-2012-4537",
"url": "https://bugzilla.suse.com/787163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-4537"
},
{
"cve": "CVE-2012-4538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-4538"
}
],
"notes": [
{
"category": "general",
"text": "The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-4538",
"url": "https://www.suse.com/security/cve/CVE-2012-4538"
},
{
"category": "external",
"summary": "SUSE Bug 779212 for CVE-2012-4538",
"url": "https://bugzilla.suse.com/779212"
},
{
"category": "external",
"summary": "SUSE Bug 786516 for CVE-2012-4538",
"url": "https://bugzilla.suse.com/786516"
},
{
"category": "external",
"summary": "SUSE Bug 786518 for CVE-2012-4538",
"url": "https://bugzilla.suse.com/786518"
},
{
"category": "external",
"summary": "SUSE Bug 786519 for CVE-2012-4538",
"url": "https://bugzilla.suse.com/786519"
},
{
"category": "external",
"summary": "SUSE Bug 786520 for CVE-2012-4538",
"url": "https://bugzilla.suse.com/786520"
},
{
"category": "external",
"summary": "SUSE Bug 787163 for CVE-2012-4538",
"url": "https://bugzilla.suse.com/787163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-4538"
},
{
"cve": "CVE-2012-4539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-4539"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka \"Grant table hypercall infinite loop DoS vulnerability.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-4539",
"url": "https://www.suse.com/security/cve/CVE-2012-4539"
},
{
"category": "external",
"summary": "SUSE Bug 779212 for CVE-2012-4539",
"url": "https://bugzilla.suse.com/779212"
},
{
"category": "external",
"summary": "SUSE Bug 786516 for CVE-2012-4539",
"url": "https://bugzilla.suse.com/786516"
},
{
"category": "external",
"summary": "SUSE Bug 786518 for CVE-2012-4539",
"url": "https://bugzilla.suse.com/786518"
},
{
"category": "external",
"summary": "SUSE Bug 786519 for CVE-2012-4539",
"url": "https://bugzilla.suse.com/786519"
},
{
"category": "external",
"summary": "SUSE Bug 786520 for CVE-2012-4539",
"url": "https://bugzilla.suse.com/786520"
},
{
"category": "external",
"summary": "SUSE Bug 787163 for CVE-2012-4539",
"url": "https://bugzilla.suse.com/787163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-4539"
},
{
"cve": "CVE-2012-4544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-4544"
}
],
"notes": [
{
"category": "general",
"text": "The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-4544",
"url": "https://www.suse.com/security/cve/CVE-2012-4544"
},
{
"category": "external",
"summary": "SUSE Bug 779212 for CVE-2012-4544",
"url": "https://bugzilla.suse.com/779212"
},
{
"category": "external",
"summary": "SUSE Bug 786516 for CVE-2012-4544",
"url": "https://bugzilla.suse.com/786516"
},
{
"category": "external",
"summary": "SUSE Bug 786518 for CVE-2012-4544",
"url": "https://bugzilla.suse.com/786518"
},
{
"category": "external",
"summary": "SUSE Bug 786519 for CVE-2012-4544",
"url": "https://bugzilla.suse.com/786519"
},
{
"category": "external",
"summary": "SUSE Bug 786520 for CVE-2012-4544",
"url": "https://bugzilla.suse.com/786520"
},
{
"category": "external",
"summary": "SUSE Bug 787163 for CVE-2012-4544",
"url": "https://bugzilla.suse.com/787163"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2012-4544",
"url": "https://bugzilla.suse.com/840592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2012-4544"
},
{
"cve": "CVE-2012-5510",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5510"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5510",
"url": "https://www.suse.com/security/cve/CVE-2012-5510"
},
{
"category": "external",
"summary": "SUSE Bug 789945 for CVE-2012-5510",
"url": "https://bugzilla.suse.com/789945"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5510"
},
{
"cve": "CVE-2012-5511",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5511"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5511",
"url": "https://www.suse.com/security/cve/CVE-2012-5511"
},
{
"category": "external",
"summary": "SUSE Bug 789944 for CVE-2012-5511",
"url": "https://bugzilla.suse.com/789944"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5511"
},
{
"cve": "CVE-2012-5513",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5513"
}
],
"notes": [
{
"category": "general",
"text": "The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5513",
"url": "https://www.suse.com/security/cve/CVE-2012-5513"
},
{
"category": "external",
"summary": "SUSE Bug 789951 for CVE-2012-5513",
"url": "https://bugzilla.suse.com/789951"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5513"
},
{
"cve": "CVE-2012-5514",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5514"
}
],
"notes": [
{
"category": "general",
"text": "The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5514",
"url": "https://www.suse.com/security/cve/CVE-2012-5514"
},
{
"category": "external",
"summary": "SUSE Bug 789948 for CVE-2012-5514",
"url": "https://bugzilla.suse.com/789948"
},
{
"category": "external",
"summary": "SUSE Bug 789988 for CVE-2012-5514",
"url": "https://bugzilla.suse.com/789988"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5514"
},
{
"cve": "CVE-2012-5515",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5515"
}
],
"notes": [
{
"category": "general",
"text": "The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5515",
"url": "https://www.suse.com/security/cve/CVE-2012-5515"
},
{
"category": "external",
"summary": "SUSE Bug 789950 for CVE-2012-5515",
"url": "https://bugzilla.suse.com/789950"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5515"
},
{
"cve": "CVE-2012-5525",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5525"
}
],
"notes": [
{
"category": "general",
"text": "The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5525",
"url": "https://www.suse.com/security/cve/CVE-2012-5525"
},
{
"category": "external",
"summary": "SUSE Bug 789952 for CVE-2012-5525",
"url": "https://bugzilla.suse.com/789952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5525"
},
{
"cve": "CVE-2012-5634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-5634"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-5634",
"url": "https://www.suse.com/security/cve/CVE-2012-5634"
},
{
"category": "external",
"summary": "SUSE Bug 794316 for CVE-2012-5634",
"url": "https://bugzilla.suse.com/794316"
},
{
"category": "external",
"summary": "SUSE Bug 800275 for CVE-2012-5634",
"url": "https://bugzilla.suse.com/800275"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2012-5634",
"url": "https://bugzilla.suse.com/840592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2012-5634"
},
{
"cve": "CVE-2012-6075",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2012-6075"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via a large packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2012-6075",
"url": "https://www.suse.com/security/cve/CVE-2012-6075"
},
{
"category": "external",
"summary": "SUSE Bug 797523 for CVE-2012-6075",
"url": "https://bugzilla.suse.com/797523"
},
{
"category": "external",
"summary": "SUSE Bug 800275 for CVE-2012-6075",
"url": "https://bugzilla.suse.com/800275"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2012-6075",
"url": "https://bugzilla.suse.com/840592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2012-6075"
},
{
"cve": "CVE-2013-0151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0151"
}
],
"notes": [
{
"category": "general",
"text": "The do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not prevent HVM_PARAM_NESTEDHVM (aka nested virtualization) operations, which allows guest OS users to cause a denial of service (long-duration page mappings and host OS crash) by leveraging administrative access to an HVM guest in a domain with a large number of VCPUs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0151",
"url": "https://www.suse.com/security/cve/CVE-2013-0151"
},
{
"category": "external",
"summary": "SUSE Bug 797285 for CVE-2013-0151",
"url": "https://bugzilla.suse.com/797285"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0151"
},
{
"cve": "CVE-2013-0152",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0152"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virtualization in a way that triggers errors that are not properly handled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0152",
"url": "https://www.suse.com/security/cve/CVE-2013-0152"
},
{
"category": "external",
"summary": "SUSE Bug 797287 for CVE-2013-0152",
"url": "https://bugzilla.suse.com/797287"
},
{
"category": "external",
"summary": "SUSE Bug 800798 for CVE-2013-0152",
"url": "https://bugzilla.suse.com/800798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0152"
},
{
"cve": "CVE-2013-0153",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-0153"
}
],
"notes": [
{
"category": "general",
"text": "The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-0153",
"url": "https://www.suse.com/security/cve/CVE-2013-0153"
},
{
"category": "external",
"summary": "SUSE Bug 800275 for CVE-2013-0153",
"url": "https://bugzilla.suse.com/800275"
},
{
"category": "external",
"summary": "SUSE Bug 800802 for CVE-2013-0153",
"url": "https://bugzilla.suse.com/800802"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2013-0153",
"url": "https://bugzilla.suse.com/840592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-0153"
},
{
"cve": "CVE-2013-1442",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1442"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCPU after touching other restored extended registers, which allows local guest OSes to obtain sensitive information by reading the registers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1442",
"url": "https://www.suse.com/security/cve/CVE-2013-1442"
},
{
"category": "external",
"summary": "SUSE Bug 839596 for CVE-2013-1442",
"url": "https://bugzilla.suse.com/839596"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2013-1442",
"url": "https://bugzilla.suse.com/840592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2013-1442"
},
{
"cve": "CVE-2013-1917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1917"
}
],
"notes": [
{
"category": "general",
"text": "Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by another IRET instruction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1917",
"url": "https://www.suse.com/security/cve/CVE-2013-1917"
},
{
"category": "external",
"summary": "SUSE Bug 813673 for CVE-2013-1917",
"url": "https://bugzilla.suse.com/813673"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2013-1917",
"url": "https://bugzilla.suse.com/840592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-1917"
},
{
"cve": "CVE-2013-1918",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1918"
}
],
"notes": [
{
"category": "general",
"text": "Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to \"deep page table traversal.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1918",
"url": "https://www.suse.com/security/cve/CVE-2013-1918"
},
{
"category": "external",
"summary": "SUSE Bug 813673 for CVE-2013-1918",
"url": "https://bugzilla.suse.com/813673"
},
{
"category": "external",
"summary": "SUSE Bug 816159 for CVE-2013-1918",
"url": "https://bugzilla.suse.com/816159"
},
{
"category": "external",
"summary": "SUSE Bug 823011 for CVE-2013-1918",
"url": "https://bugzilla.suse.com/823011"
},
{
"category": "external",
"summary": "SUSE Bug 826882 for CVE-2013-1918",
"url": "https://bugzilla.suse.com/826882"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2013-1918",
"url": "https://bugzilla.suse.com/840592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-1918"
},
{
"cve": "CVE-2013-1919",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1919"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to \"passed-through IRQs or PCI devices.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1919",
"url": "https://www.suse.com/security/cve/CVE-2013-1919"
},
{
"category": "external",
"summary": "SUSE Bug 813673 for CVE-2013-1919",
"url": "https://bugzilla.suse.com/813673"
},
{
"category": "external",
"summary": "SUSE Bug 813675 for CVE-2013-1919",
"url": "https://bugzilla.suse.com/813675"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2013-1919",
"url": "https://bugzilla.suse.com/840592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-1919"
},
{
"cve": "CVE-2013-1922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1922"
}
],
"notes": [
{
"category": "general",
"text": "qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1922",
"url": "https://www.suse.com/security/cve/CVE-2013-1922"
},
{
"category": "external",
"summary": "SUSE Bug 814059 for CVE-2013-1922",
"url": "https://bugzilla.suse.com/814059"
},
{
"category": "external",
"summary": "SUSE Bug 934753 for CVE-2013-1922",
"url": "https://bugzilla.suse.com/934753"
},
{
"category": "external",
"summary": "SUSE Bug 934768 for CVE-2013-1922",
"url": "https://bugzilla.suse.com/934768"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-1922"
},
{
"cve": "CVE-2013-1952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-1952"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check the source when accessing a bridge device\u0027s interrupt remapping table entries for MSI interrupts, which allows local guest domains to cause a denial of service (interrupt injection) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-1952",
"url": "https://www.suse.com/security/cve/CVE-2013-1952"
},
{
"category": "external",
"summary": "SUSE Bug 813673 for CVE-2013-1952",
"url": "https://bugzilla.suse.com/813673"
},
{
"category": "external",
"summary": "SUSE Bug 816163 for CVE-2013-1952",
"url": "https://bugzilla.suse.com/816163"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2013-1952",
"url": "https://bugzilla.suse.com/840592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-1952"
},
{
"cve": "CVE-2013-2007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-2007"
}
],
"notes": [
{
"category": "general",
"text": "The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-2007",
"url": "https://www.suse.com/security/cve/CVE-2013-2007"
},
{
"category": "external",
"summary": "SUSE Bug 818181 for CVE-2013-2007",
"url": "https://bugzilla.suse.com/818181"
},
{
"category": "external",
"summary": "SUSE Bug 818182 for CVE-2013-2007",
"url": "https://bugzilla.suse.com/818182"
},
{
"category": "external",
"summary": "SUSE Bug 818183 for CVE-2013-2007",
"url": "https://bugzilla.suse.com/818183"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-2007"
},
{
"cve": "CVE-2013-3495",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-3495"
}
],
"notes": [
{
"category": "general",
"text": "The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-3495",
"url": "https://www.suse.com/security/cve/CVE-2013-3495"
},
{
"category": "external",
"summary": "SUSE Bug 826717 for CVE-2013-3495",
"url": "https://bugzilla.suse.com/826717"
},
{
"category": "external",
"summary": "SUSE Bug 903970 for CVE-2013-3495",
"url": "https://bugzilla.suse.com/903970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-3495"
},
{
"cve": "CVE-2013-4355",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4355"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4355",
"url": "https://www.suse.com/security/cve/CVE-2013-4355"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2013-4355",
"url": "https://bugzilla.suse.com/840592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2013-4355"
},
{
"cve": "CVE-2013-4356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4356"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4356",
"url": "https://www.suse.com/security/cve/CVE-2013-4356"
},
{
"category": "external",
"summary": "SUSE Bug 840593 for CVE-2013-4356",
"url": "https://bugzilla.suse.com/840593"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4356"
},
{
"cve": "CVE-2013-4361",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4361"
}
],
"notes": [
{
"category": "general",
"text": "The fbld instruction emulation in Xen 3.3.x through 4.3.x does not use the correct variable for the source effective address, which allows local HVM guests to obtain hypervisor stack information by reading the values used by the instruction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4361",
"url": "https://www.suse.com/security/cve/CVE-2013-4361"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2013-4361",
"url": "https://bugzilla.suse.com/840592"
},
{
"category": "external",
"summary": "SUSE Bug 841766 for CVE-2013-4361",
"url": "https://bugzilla.suse.com/841766"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2013-4361"
},
{
"cve": "CVE-2013-4375",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4375"
}
],
"notes": [
{
"category": "general",
"text": "The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service (domain grant reference consumption) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4375",
"url": "https://www.suse.com/security/cve/CVE-2013-4375"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2013-4375",
"url": "https://bugzilla.suse.com/840592"
},
{
"category": "external",
"summary": "SUSE Bug 842515 for CVE-2013-4375",
"url": "https://bugzilla.suse.com/842515"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2013-4375"
},
{
"cve": "CVE-2013-4416",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4416"
}
],
"notes": [
{
"category": "general",
"text": "The Ocaml xenstored implementation (oxenstored) in Xen 4.1.x, 4.2.x, and 4.3.x allows local guest domains to cause a denial of service (domain shutdown) via a large message reply.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4416",
"url": "https://www.suse.com/security/cve/CVE-2013-4416"
},
{
"category": "external",
"summary": "SUSE Bug 840592 for CVE-2013-4416",
"url": "https://bugzilla.suse.com/840592"
},
{
"category": "external",
"summary": "SUSE Bug 845520 for CVE-2013-4416",
"url": "https://bugzilla.suse.com/845520"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4416"
},
{
"cve": "CVE-2013-4494",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4494"
}
],
"notes": [
{
"category": "general",
"text": "Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the same order, which allows local guest administrators with access to multiple vcpus to cause a denial of service (host deadlock) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4494",
"url": "https://www.suse.com/security/cve/CVE-2013-4494"
},
{
"category": "external",
"summary": "SUSE Bug 848657 for CVE-2013-4494",
"url": "https://bugzilla.suse.com/848657"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4494"
},
{
"cve": "CVE-2013-4533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4533"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-\u003erx_level value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4533",
"url": "https://www.suse.com/security/cve/CVE-2013-4533"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864655 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/864655"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964644 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/964644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4533"
},
{
"cve": "CVE-2013-4534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4534"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4534",
"url": "https://www.suse.com/security/cve/CVE-2013-4534"
},
{
"category": "external",
"summary": "SUSE Bug 864811 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/864811"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964452 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/964452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4534"
},
{
"cve": "CVE-2013-4537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4537"
}
],
"notes": [
{
"category": "general",
"text": "The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4537",
"url": "https://www.suse.com/security/cve/CVE-2013-4537"
},
{
"category": "external",
"summary": "SUSE Bug 864391 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/864391"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962642 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/962642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4537"
},
{
"cve": "CVE-2013-4538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4538"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4538",
"url": "https://www.suse.com/security/cve/CVE-2013-4538"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864769 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/864769"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962335 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/962335"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4538"
},
{
"cve": "CVE-2013-4539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4539"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4539",
"url": "https://www.suse.com/security/cve/CVE-2013-4539"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864805 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/864805"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962758 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/962758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4539"
},
{
"cve": "CVE-2013-4540",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4540"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4540",
"url": "https://www.suse.com/security/cve/CVE-2013-4540"
},
{
"category": "external",
"summary": "SUSE Bug 864801 for CVE-2013-4540",
"url": "https://bugzilla.suse.com/864801"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4540",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 880751 for CVE-2013-4540",
"url": "https://bugzilla.suse.com/880751"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2013-4540"
},
{
"cve": "CVE-2013-4551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4551"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to \"guest VMX instruction execution.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4551",
"url": "https://www.suse.com/security/cve/CVE-2013-4551"
},
{
"category": "external",
"summary": "SUSE Bug 848657 for CVE-2013-4551",
"url": "https://bugzilla.suse.com/848657"
},
{
"category": "external",
"summary": "SUSE Bug 849665 for CVE-2013-4551",
"url": "https://bugzilla.suse.com/849665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4551"
},
{
"cve": "CVE-2013-4553",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4553"
}
],
"notes": [
{
"category": "general",
"text": "The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_lock and mm_rwlock in the same order, which allows local guest administrators to cause a denial of service (host deadlock).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4553",
"url": "https://www.suse.com/security/cve/CVE-2013-4553"
},
{
"category": "external",
"summary": "SUSE Bug 848657 for CVE-2013-4553",
"url": "https://bugzilla.suse.com/848657"
},
{
"category": "external",
"summary": "SUSE Bug 849667 for CVE-2013-4553",
"url": "https://bugzilla.suse.com/849667"
},
{
"category": "external",
"summary": "SUSE Bug 849668 for CVE-2013-4553",
"url": "https://bugzilla.suse.com/849668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2013-4553"
},
{
"cve": "CVE-2013-4554",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4554"
}
],
"notes": [
{
"category": "general",
"text": "Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4554",
"url": "https://www.suse.com/security/cve/CVE-2013-4554"
},
{
"category": "external",
"summary": "SUSE Bug 848657 for CVE-2013-4554",
"url": "https://bugzilla.suse.com/848657"
},
{
"category": "external",
"summary": "SUSE Bug 849668 for CVE-2013-4554",
"url": "https://bugzilla.suse.com/849668"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2013-4554"
},
{
"cve": "CVE-2014-0222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0222"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0222",
"url": "https://www.suse.com/security/cve/CVE-2014-0222"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 877642 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/877642"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/950367"
},
{
"category": "external",
"summary": "SUSE Bug 964925 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/964925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-0222"
},
{
"cve": "CVE-2014-3124",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3124"
}
],
"notes": [
{
"category": "general",
"text": "The HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to cause a denial of service (hypervisor crash) or possibly execute arbitrary code by leveraging a separate qemu-dm vulnerability to trigger invalid page table translations for unspecified memory page types.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3124",
"url": "https://www.suse.com/security/cve/CVE-2014-3124"
},
{
"category": "external",
"summary": "SUSE Bug 875668 for CVE-2014-3124",
"url": "https://bugzilla.suse.com/875668"
},
{
"category": "external",
"summary": "SUSE Bug 880751 for CVE-2014-3124",
"url": "https://bugzilla.suse.com/880751"
},
{
"category": "external",
"summary": "SUSE Bug 903970 for CVE-2014-3124",
"url": "https://bugzilla.suse.com/903970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3124"
},
{
"cve": "CVE-2014-3640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3640"
}
],
"notes": [
{
"category": "general",
"text": "The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3640",
"url": "https://www.suse.com/security/cve/CVE-2014-3640"
},
{
"category": "external",
"summary": "SUSE Bug 897654 for CVE-2014-3640",
"url": "https://bugzilla.suse.com/897654"
},
{
"category": "external",
"summary": "SUSE Bug 965112 for CVE-2014-3640",
"url": "https://bugzilla.suse.com/965112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-3640"
},
{
"cve": "CVE-2014-3672",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3672"
}
],
"notes": [
{
"category": "general",
"text": "The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3672",
"url": "https://www.suse.com/security/cve/CVE-2014-3672"
},
{
"category": "external",
"summary": "SUSE Bug 981264 for CVE-2014-3672",
"url": "https://bugzilla.suse.com/981264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2014-3672"
},
{
"cve": "CVE-2014-5146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-5146"
}
],
"notes": [
{
"category": "general",
"text": "Certain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when using Hardware Assisted Paging (HAP), are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5149.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-5146",
"url": "https://www.suse.com/security/cve/CVE-2014-5146"
},
{
"category": "external",
"summary": "SUSE Bug 889526 for CVE-2014-5146",
"url": "https://bugzilla.suse.com/889526"
},
{
"category": "external",
"summary": "SUSE Bug 903970 for CVE-2014-5146",
"url": "https://bugzilla.suse.com/903970"
},
{
"category": "external",
"summary": "SUSE Bug 918998 for CVE-2014-5146",
"url": "https://bugzilla.suse.com/918998"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2014-5146",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-5146"
},
{
"cve": "CVE-2014-5149",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-5149"
}
],
"notes": [
{
"category": "general",
"text": "Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service (vcpu consumption) by invoking these operations, which process every page assigned to a guest, a different vulnerability than CVE-2014-5146.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-5149",
"url": "https://www.suse.com/security/cve/CVE-2014-5149"
},
{
"category": "external",
"summary": "SUSE Bug 889526 for CVE-2014-5149",
"url": "https://bugzilla.suse.com/889526"
},
{
"category": "external",
"summary": "SUSE Bug 903970 for CVE-2014-5149",
"url": "https://bugzilla.suse.com/903970"
},
{
"category": "external",
"summary": "SUSE Bug 918998 for CVE-2014-5149",
"url": "https://bugzilla.suse.com/918998"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2014-5149",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-5149"
},
{
"cve": "CVE-2014-6268",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-6268"
}
],
"notes": [
{
"category": "general",
"text": "The evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of service (host crash) via vectors involving an uninitialized FIFO-based event channel control block when (1) binding or (2) moving an event to a different VCPU.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-6268",
"url": "https://www.suse.com/security/cve/CVE-2014-6268"
},
{
"category": "external",
"summary": "SUSE Bug 895804 for CVE-2014-6268",
"url": "https://bugzilla.suse.com/895804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-6268"
},
{
"cve": "CVE-2014-7154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7154"
}
],
"notes": [
{
"category": "general",
"text": "Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain local guest domains to cause a denial of service via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7154",
"url": "https://www.suse.com/security/cve/CVE-2014-7154"
},
{
"category": "external",
"summary": "SUSE Bug 880751 for CVE-2014-7154",
"url": "https://bugzilla.suse.com/880751"
},
{
"category": "external",
"summary": "SUSE Bug 895798 for CVE-2014-7154",
"url": "https://bugzilla.suse.com/895798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-7154"
},
{
"cve": "CVE-2014-7155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7155"
}
],
"notes": [
{
"category": "general",
"text": "The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a denial of service (guest crash) or gain guest kernel mode privileges via vectors involving an (1) HLT, (2) LGDT, (3) LIDT, or (4) LMSW instruction.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7155",
"url": "https://www.suse.com/security/cve/CVE-2014-7155"
},
{
"category": "external",
"summary": "SUSE Bug 880751 for CVE-2014-7155",
"url": "https://bugzilla.suse.com/880751"
},
{
"category": "external",
"summary": "SUSE Bug 895799 for CVE-2014-7155",
"url": "https://bugzilla.suse.com/895799"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-7155"
},
{
"cve": "CVE-2014-7156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7156"
}
],
"notes": [
{
"category": "general",
"text": "The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 3.3.x through 4.4.x does not check the supervisor mode permissions for instructions that generate software interrupts, which allows local HVM guest users to cause a denial of service (guest crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7156",
"url": "https://www.suse.com/security/cve/CVE-2014-7156"
},
{
"category": "external",
"summary": "SUSE Bug 880751 for CVE-2014-7156",
"url": "https://bugzilla.suse.com/880751"
},
{
"category": "external",
"summary": "SUSE Bug 895802 for CVE-2014-7156",
"url": "https://bugzilla.suse.com/895802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2014-7156"
},
{
"cve": "CVE-2014-7188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7188"
}
],
"notes": [
{
"category": "general",
"text": "The hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an improper MSR range for x2APIC emulation, which allows local HVM guests to cause a denial of service (host crash) or read data from the hypervisor or other guests via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7188",
"url": "https://www.suse.com/security/cve/CVE-2014-7188"
},
{
"category": "external",
"summary": "SUSE Bug 880751 for CVE-2014-7188",
"url": "https://bugzilla.suse.com/880751"
},
{
"category": "external",
"summary": "SUSE Bug 897657 for CVE-2014-7188",
"url": "https://bugzilla.suse.com/897657"
},
{
"category": "external",
"summary": "SUSE Bug 903970 for CVE-2014-7188",
"url": "https://bugzilla.suse.com/903970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2014-7188"
},
{
"cve": "CVE-2014-7815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7815"
}
],
"notes": [
{
"category": "general",
"text": "The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7815",
"url": "https://www.suse.com/security/cve/CVE-2014-7815"
},
{
"category": "external",
"summary": "SUSE Bug 902737 for CVE-2014-7815",
"url": "https://bugzilla.suse.com/902737"
},
{
"category": "external",
"summary": "SUSE Bug 962627 for CVE-2014-7815",
"url": "https://bugzilla.suse.com/962627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2014-7815"
},
{
"cve": "CVE-2015-1779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1779"
}
],
"notes": [
{
"category": "general",
"text": "The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1779",
"url": "https://www.suse.com/security/cve/CVE-2015-1779"
},
{
"category": "external",
"summary": "SUSE Bug 924018 for CVE-2015-1779",
"url": "https://bugzilla.suse.com/924018"
},
{
"category": "external",
"summary": "SUSE Bug 962632 for CVE-2015-1779",
"url": "https://bugzilla.suse.com/962632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-1779"
},
{
"cve": "CVE-2015-3259",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3259"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators to gain privileges via a long configuration argument.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3259",
"url": "https://www.suse.com/security/cve/CVE-2015-3259"
},
{
"category": "external",
"summary": "SUSE Bug 935634 for CVE-2015-3259",
"url": "https://bugzilla.suse.com/935634"
},
{
"category": "external",
"summary": "SUSE Bug 936281 for CVE-2015-3259",
"url": "https://bugzilla.suse.com/936281"
},
{
"category": "external",
"summary": "SUSE Bug 937018 for CVE-2015-3259",
"url": "https://bugzilla.suse.com/937018"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2015-3259",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-3259"
},
{
"cve": "CVE-2015-3340",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3340"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3340",
"url": "https://www.suse.com/security/cve/CVE-2015-3340"
},
{
"category": "external",
"summary": "SUSE Bug 927967 for CVE-2015-3340",
"url": "https://bugzilla.suse.com/927967"
},
{
"category": "external",
"summary": "SUSE Bug 929339 for CVE-2015-3340",
"url": "https://bugzilla.suse.com/929339"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-3340"
},
{
"cve": "CVE-2015-3456",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3456"
}
],
"notes": [
{
"category": "general",
"text": "The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3456",
"url": "https://www.suse.com/security/cve/CVE-2015-3456"
},
{
"category": "external",
"summary": "SUSE Bug 929339 for CVE-2015-3456",
"url": "https://bugzilla.suse.com/929339"
},
{
"category": "external",
"summary": "SUSE Bug 932770 for CVE-2015-3456",
"url": "https://bugzilla.suse.com/932770"
},
{
"category": "external",
"summary": "SUSE Bug 935900 for CVE-2015-3456",
"url": "https://bugzilla.suse.com/935900"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-3456"
},
{
"cve": "CVE-2015-4037",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4037"
}
],
"notes": [
{
"category": "general",
"text": "The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.*-* files before the program.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4037",
"url": "https://www.suse.com/security/cve/CVE-2015-4037"
},
{
"category": "external",
"summary": "SUSE Bug 932267 for CVE-2015-4037",
"url": "https://bugzilla.suse.com/932267"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2015-4037",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-4037"
},
{
"cve": "CVE-2015-4103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4103"
}
],
"notes": [
{
"category": "general",
"text": "Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4103",
"url": "https://www.suse.com/security/cve/CVE-2015-4103"
},
{
"category": "external",
"summary": "SUSE Bug 931625 for CVE-2015-4103",
"url": "https://bugzilla.suse.com/931625"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-4103"
},
{
"cve": "CVE-2015-4104",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4104"
}
],
"notes": [
{
"category": "general",
"text": "Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service (unexpected interrupt and host crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4104",
"url": "https://www.suse.com/security/cve/CVE-2015-4104"
},
{
"category": "external",
"summary": "SUSE Bug 931626 for CVE-2015-4104",
"url": "https://bugzilla.suse.com/931626"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-4104"
},
{
"cve": "CVE-2015-4105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4105"
}
],
"notes": [
{
"category": "general",
"text": "Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to cause a denial of service (host disk consumption) via certain invalid operations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4105",
"url": "https://www.suse.com/security/cve/CVE-2015-4105"
},
{
"category": "external",
"summary": "SUSE Bug 931627 for CVE-2015-4105",
"url": "https://bugzilla.suse.com/931627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-4105"
},
{
"cve": "CVE-2015-4106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-4106"
}
],
"notes": [
{
"category": "general",
"text": "QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-4106",
"url": "https://www.suse.com/security/cve/CVE-2015-4106"
},
{
"category": "external",
"summary": "SUSE Bug 931628 for CVE-2015-4106",
"url": "https://bugzilla.suse.com/931628"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-4106"
},
{
"cve": "CVE-2015-5154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5154"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute arbitrary code on the host via unspecified ATAPI commands.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5154",
"url": "https://www.suse.com/security/cve/CVE-2015-5154"
},
{
"category": "external",
"summary": "SUSE Bug 938344 for CVE-2015-5154",
"url": "https://bugzilla.suse.com/938344"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2015-5154",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-5154"
},
{
"cve": "CVE-2015-5239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5239"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5239",
"url": "https://www.suse.com/security/cve/CVE-2015-5239"
},
{
"category": "external",
"summary": "SUSE Bug 944463 for CVE-2015-5239",
"url": "https://bugzilla.suse.com/944463"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2015-5239",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-5239"
},
{
"cve": "CVE-2015-5278",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5278"
}
],
"notes": [
{
"category": "general",
"text": "The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5278",
"url": "https://www.suse.com/security/cve/CVE-2015-5278"
},
{
"category": "external",
"summary": "SUSE Bug 945989 for CVE-2015-5278",
"url": "https://bugzilla.suse.com/945989"
},
{
"category": "external",
"summary": "SUSE Bug 964947 for CVE-2015-5278",
"url": "https://bugzilla.suse.com/964947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-5278"
},
{
"cve": "CVE-2015-5307",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5307"
}
],
"notes": [
{
"category": "general",
"text": "The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5307",
"url": "https://www.suse.com/security/cve/CVE-2015-5307"
},
{
"category": "external",
"summary": "SUSE Bug 953527 for CVE-2015-5307",
"url": "https://bugzilla.suse.com/953527"
},
{
"category": "external",
"summary": "SUSE Bug 954018 for CVE-2015-5307",
"url": "https://bugzilla.suse.com/954018"
},
{
"category": "external",
"summary": "SUSE Bug 954404 for CVE-2015-5307",
"url": "https://bugzilla.suse.com/954404"
},
{
"category": "external",
"summary": "SUSE Bug 954405 for CVE-2015-5307",
"url": "https://bugzilla.suse.com/954405"
},
{
"category": "external",
"summary": "SUSE Bug 962977 for CVE-2015-5307",
"url": "https://bugzilla.suse.com/962977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-5307"
},
{
"cve": "CVE-2015-6815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6815"
}
],
"notes": [
{
"category": "general",
"text": "The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6815",
"url": "https://www.suse.com/security/cve/CVE-2015-6815"
},
{
"category": "external",
"summary": "SUSE Bug 944697 for CVE-2015-6815",
"url": "https://bugzilla.suse.com/944697"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2015-6815",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-6815"
},
{
"cve": "CVE-2015-6855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6855"
}
],
"notes": [
{
"category": "general",
"text": "hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6855",
"url": "https://www.suse.com/security/cve/CVE-2015-6855"
},
{
"category": "external",
"summary": "SUSE Bug 945404 for CVE-2015-6855",
"url": "https://bugzilla.suse.com/945404"
},
{
"category": "external",
"summary": "SUSE Bug 965156 for CVE-2015-6855",
"url": "https://bugzilla.suse.com/965156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-6855"
},
{
"cve": "CVE-2015-7311",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7311"
}
],
"notes": [
{
"category": "general",
"text": "libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device model, which allows local guest users to write to a read-only disk image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7311",
"url": "https://www.suse.com/security/cve/CVE-2015-7311"
},
{
"category": "external",
"summary": "SUSE Bug 947165 for CVE-2015-7311",
"url": "https://bugzilla.suse.com/947165"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2015-7311",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7311"
},
{
"cve": "CVE-2015-7504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7504"
}
],
"notes": [
{
"category": "general",
"text": "Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of service (instance crash) or possibly execute arbitrary code via a series of packets in loopback mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7504",
"url": "https://www.suse.com/security/cve/CVE-2015-7504"
},
{
"category": "external",
"summary": "SUSE Bug 956411 for CVE-2015-7504",
"url": "https://bugzilla.suse.com/956411"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7504"
},
{
"cve": "CVE-2015-7512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7512"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7512",
"url": "https://www.suse.com/security/cve/CVE-2015-7512"
},
{
"category": "external",
"summary": "SUSE Bug 957162 for CVE-2015-7512",
"url": "https://bugzilla.suse.com/957162"
},
{
"category": "external",
"summary": "SUSE Bug 962360 for CVE-2015-7512",
"url": "https://bugzilla.suse.com/962360"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7512"
},
{
"cve": "CVE-2015-7549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7549"
}
],
"notes": [
{
"category": "general",
"text": "The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7549",
"url": "https://www.suse.com/security/cve/CVE-2015-7549"
},
{
"category": "external",
"summary": "SUSE Bug 958917 for CVE-2015-7549",
"url": "https://bugzilla.suse.com/958917"
},
{
"category": "external",
"summary": "SUSE Bug 958918 for CVE-2015-7549",
"url": "https://bugzilla.suse.com/958918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7549"
},
{
"cve": "CVE-2015-7835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7835"
}
],
"notes": [
{
"category": "general",
"text": "The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7835",
"url": "https://www.suse.com/security/cve/CVE-2015-7835"
},
{
"category": "external",
"summary": "SUSE Bug 940929 for CVE-2015-7835",
"url": "https://bugzilla.suse.com/940929"
},
{
"category": "external",
"summary": "SUSE Bug 947159 for CVE-2015-7835",
"url": "https://bugzilla.suse.com/947159"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2015-7835",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-7835"
},
{
"cve": "CVE-2015-7969",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7969"
}
],
"notes": [
{
"category": "general",
"text": "Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service (memory consumption) via a large number of \"teardowns\" of domains with the vcpu pointer array allocated using the (1) XEN_DOMCTL_max_vcpus hypercall or the xenoprofile state vcpu pointer array allocated using the (2) XENOPROF_get_buffer or (3) XENOPROF_set_passive hypercall.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7969",
"url": "https://www.suse.com/security/cve/CVE-2015-7969"
},
{
"category": "external",
"summary": "SUSE Bug 950703 for CVE-2015-7969",
"url": "https://bugzilla.suse.com/950703"
},
{
"category": "external",
"summary": "SUSE Bug 950705 for CVE-2015-7969",
"url": "https://bugzilla.suse.com/950705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7969"
},
{
"cve": "CVE-2015-7970",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7970"
}
],
"notes": [
{
"category": "general",
"text": "The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service (CPU consumption and possibly reboot) via crafted memory contents that triggers a \"time-consuming linear scan,\" related to Populate-on-Demand.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7970",
"url": "https://www.suse.com/security/cve/CVE-2015-7970"
},
{
"category": "external",
"summary": "SUSE Bug 950704 for CVE-2015-7970",
"url": "https://bugzilla.suse.com/950704"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-7970"
},
{
"cve": "CVE-2015-7971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7971"
}
],
"notes": [
{
"category": "general",
"text": "Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local guests to cause a denial of service via a sequence of crafted (1) HYPERCALL_xenoprof_op hypercalls, which are not properly handled in the do_xenoprof_op function in common/xenoprof.c, or (2) HYPERVISOR_xenpmu_op hypercalls, which are not properly handled in the do_xenpmu_op function in arch/x86/cpu/vpmu.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7971",
"url": "https://www.suse.com/security/cve/CVE-2015-7971"
},
{
"category": "external",
"summary": "SUSE Bug 950706 for CVE-2015-7971",
"url": "https://bugzilla.suse.com/950706"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7971"
},
{
"cve": "CVE-2015-7972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7972"
}
],
"notes": [
{
"category": "general",
"text": "The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl_dom.c in Xen 3.4.x through 4.6.x do not properly calculate the balloon size when using the populate-on-demand (PoD) system, which allows local HVM guest users to cause a denial of service (guest crash) via unspecified vectors related to \"heavy memory pressure.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7972",
"url": "https://www.suse.com/security/cve/CVE-2015-7972"
},
{
"category": "external",
"summary": "SUSE Bug 950704 for CVE-2015-7972",
"url": "https://bugzilla.suse.com/950704"
},
{
"category": "external",
"summary": "SUSE Bug 951845 for CVE-2015-7972",
"url": "https://bugzilla.suse.com/951845"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-7972"
},
{
"cve": "CVE-2015-8104",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8104"
}
],
"notes": [
{
"category": "general",
"text": "The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8104",
"url": "https://www.suse.com/security/cve/CVE-2015-8104"
},
{
"category": "external",
"summary": "SUSE Bug 1215748 for CVE-2015-8104",
"url": "https://bugzilla.suse.com/1215748"
},
{
"category": "external",
"summary": "SUSE Bug 953527 for CVE-2015-8104",
"url": "https://bugzilla.suse.com/953527"
},
{
"category": "external",
"summary": "SUSE Bug 954018 for CVE-2015-8104",
"url": "https://bugzilla.suse.com/954018"
},
{
"category": "external",
"summary": "SUSE Bug 954404 for CVE-2015-8104",
"url": "https://bugzilla.suse.com/954404"
},
{
"category": "external",
"summary": "SUSE Bug 954405 for CVE-2015-8104",
"url": "https://bugzilla.suse.com/954405"
},
{
"category": "external",
"summary": "SUSE Bug 962977 for CVE-2015-8104",
"url": "https://bugzilla.suse.com/962977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "critical"
}
],
"title": "CVE-2015-8104"
},
{
"cve": "CVE-2015-8339",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8339"
}
],
"notes": [
{
"category": "general",
"text": "The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domain, which might allow guest OS administrators to cause a denial of service (host crash) via unspecified vectors related to domain teardown.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8339",
"url": "https://www.suse.com/security/cve/CVE-2015-8339"
},
{
"category": "external",
"summary": "SUSE Bug 956408 for CVE-2015-8339",
"url": "https://bugzilla.suse.com/956408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8339"
},
{
"cve": "CVE-2015-8340",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8340"
}
],
"notes": [
{
"category": "general",
"text": "The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host crash) via unspecified vectors, related to XENMEM_exchange error handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8340",
"url": "https://www.suse.com/security/cve/CVE-2015-8340"
},
{
"category": "external",
"summary": "SUSE Bug 956408 for CVE-2015-8340",
"url": "https://bugzilla.suse.com/956408"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8340"
},
{
"cve": "CVE-2015-8341",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8341"
}
],
"notes": [
{
"category": "general",
"text": "The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8341",
"url": "https://www.suse.com/security/cve/CVE-2015-8341"
},
{
"category": "external",
"summary": "SUSE Bug 956409 for CVE-2015-8341",
"url": "https://bugzilla.suse.com/956409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8341"
},
{
"cve": "CVE-2015-8345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8345"
}
],
"notes": [
{
"category": "general",
"text": "The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash and infinite loop) via vectors involving the command block list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8345",
"url": "https://www.suse.com/security/cve/CVE-2015-8345"
},
{
"category": "external",
"summary": "SUSE Bug 956829 for CVE-2015-8345",
"url": "https://bugzilla.suse.com/956829"
},
{
"category": "external",
"summary": "SUSE Bug 956832 for CVE-2015-8345",
"url": "https://bugzilla.suse.com/956832"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8345"
},
{
"cve": "CVE-2015-8504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8504"
}
],
"notes": [
{
"category": "general",
"text": "Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8504",
"url": "https://www.suse.com/security/cve/CVE-2015-8504"
},
{
"category": "external",
"summary": "SUSE Bug 958491 for CVE-2015-8504",
"url": "https://bugzilla.suse.com/958491"
},
{
"category": "external",
"summary": "SUSE Bug 958493 for CVE-2015-8504",
"url": "https://bugzilla.suse.com/958493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8504"
},
{
"cve": "CVE-2015-8550",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8550"
}
],
"notes": [
{
"category": "general",
"text": "Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8550",
"url": "https://www.suse.com/security/cve/CVE-2015-8550"
},
{
"category": "external",
"summary": "SUSE Bug 1020452 for CVE-2015-8550",
"url": "https://bugzilla.suse.com/1020452"
},
{
"category": "external",
"summary": "SUSE Bug 1052256 for CVE-2015-8550",
"url": "https://bugzilla.suse.com/1052256"
},
{
"category": "external",
"summary": "SUSE Bug 957988 for CVE-2015-8550",
"url": "https://bugzilla.suse.com/957988"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-8550"
},
{
"cve": "CVE-2015-8554",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8554"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries, related to a \"write path.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8554",
"url": "https://www.suse.com/security/cve/CVE-2015-8554"
},
{
"category": "external",
"summary": "SUSE Bug 958007 for CVE-2015-8554",
"url": "https://bugzilla.suse.com/958007"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-8554"
},
{
"cve": "CVE-2015-8555",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8555"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8555",
"url": "https://www.suse.com/security/cve/CVE-2015-8555"
},
{
"category": "external",
"summary": "SUSE Bug 958009 for CVE-2015-8555",
"url": "https://bugzilla.suse.com/958009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-8555"
},
{
"cve": "CVE-2015-8558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8558"
}
],
"notes": [
{
"category": "general",
"text": "The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8558",
"url": "https://www.suse.com/security/cve/CVE-2015-8558"
},
{
"category": "external",
"summary": "SUSE Bug 959005 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/959005"
},
{
"category": "external",
"summary": "SUSE Bug 959006 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/959006"
},
{
"category": "external",
"summary": "SUSE Bug 976109 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/976109"
},
{
"category": "external",
"summary": "SUSE Bug 976111 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/976111"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8558"
},
{
"cve": "CVE-2015-8567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8567"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8567",
"url": "https://www.suse.com/security/cve/CVE-2015-8567"
},
{
"category": "external",
"summary": "SUSE Bug 959386 for CVE-2015-8567",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "external",
"summary": "SUSE Bug 959387 for CVE-2015-8567",
"url": "https://bugzilla.suse.com/959387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-8567"
},
{
"cve": "CVE-2015-8568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8568"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxnet3 device repeatedly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8568",
"url": "https://www.suse.com/security/cve/CVE-2015-8568"
},
{
"category": "external",
"summary": "SUSE Bug 959386 for CVE-2015-8568",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "external",
"summary": "SUSE Bug 959387 for CVE-2015-8568",
"url": "https://bugzilla.suse.com/959387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-8568"
},
{
"cve": "CVE-2015-8613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8613"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8613",
"url": "https://www.suse.com/security/cve/CVE-2015-8613"
},
{
"category": "external",
"summary": "SUSE Bug 961358 for CVE-2015-8613",
"url": "https://bugzilla.suse.com/961358"
},
{
"category": "external",
"summary": "SUSE Bug 961556 for CVE-2015-8613",
"url": "https://bugzilla.suse.com/961556"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8613"
},
{
"cve": "CVE-2015-8615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8615"
}
],
"notes": [
{
"category": "general",
"text": "The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to cause a denial of service via a large number of changes to the callback method (HVM_PARAM_CALLBACK_IRQ).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8615",
"url": "https://www.suse.com/security/cve/CVE-2015-8615"
},
{
"category": "external",
"summary": "SUSE Bug 960093 for CVE-2015-8615",
"url": "https://bugzilla.suse.com/960093"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8615"
},
{
"cve": "CVE-2015-8619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8619"
}
],
"notes": [
{
"category": "general",
"text": "The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8619",
"url": "https://www.suse.com/security/cve/CVE-2015-8619"
},
{
"category": "external",
"summary": "SUSE Bug 960334 for CVE-2015-8619",
"url": "https://bugzilla.suse.com/960334"
},
{
"category": "external",
"summary": "SUSE Bug 965269 for CVE-2015-8619",
"url": "https://bugzilla.suse.com/965269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2015-8619"
},
{
"cve": "CVE-2015-8743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8743"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing \u0027ioport\u0027 r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8743",
"url": "https://www.suse.com/security/cve/CVE-2015-8743"
},
{
"category": "external",
"summary": "SUSE Bug 960725 for CVE-2015-8743",
"url": "https://bugzilla.suse.com/960725"
},
{
"category": "external",
"summary": "SUSE Bug 960726 for CVE-2015-8743",
"url": "https://bugzilla.suse.com/960726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2015-8743"
},
{
"cve": "CVE-2015-8744",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8744"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8744",
"url": "https://www.suse.com/security/cve/CVE-2015-8744"
},
{
"category": "external",
"summary": "SUSE Bug 960835 for CVE-2015-8744",
"url": "https://bugzilla.suse.com/960835"
},
{
"category": "external",
"summary": "SUSE Bug 960836 for CVE-2015-8744",
"url": "https://bugzilla.suse.com/960836"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-8744"
},
{
"cve": "CVE-2015-8745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8745"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8745",
"url": "https://www.suse.com/security/cve/CVE-2015-8745"
},
{
"category": "external",
"summary": "SUSE Bug 960707 for CVE-2015-8745",
"url": "https://bugzilla.suse.com/960707"
},
{
"category": "external",
"summary": "SUSE Bug 960708 for CVE-2015-8745",
"url": "https://bugzilla.suse.com/960708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2015-8745"
},
{
"cve": "CVE-2016-1568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1568"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1568",
"url": "https://www.suse.com/security/cve/CVE-2016-1568"
},
{
"category": "external",
"summary": "SUSE Bug 961332 for CVE-2016-1568",
"url": "https://bugzilla.suse.com/961332"
},
{
"category": "external",
"summary": "SUSE Bug 961333 for CVE-2016-1568",
"url": "https://bugzilla.suse.com/961333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1568"
},
{
"cve": "CVE-2016-1570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1570"
}
],
"notes": [
{
"category": "general",
"text": "The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1570",
"url": "https://www.suse.com/security/cve/CVE-2016-1570"
},
{
"category": "external",
"summary": "SUSE Bug 960861 for CVE-2016-1570",
"url": "https://bugzilla.suse.com/960861"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-1570"
},
{
"cve": "CVE-2016-1571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1571"
}
],
"notes": [
{
"category": "general",
"text": "The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1571",
"url": "https://www.suse.com/security/cve/CVE-2016-1571"
},
{
"category": "external",
"summary": "SUSE Bug 960861 for CVE-2016-1571",
"url": "https://bugzilla.suse.com/960861"
},
{
"category": "external",
"summary": "SUSE Bug 960862 for CVE-2016-1571",
"url": "https://bugzilla.suse.com/960862"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-1571"
},
{
"cve": "CVE-2016-1714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1714"
}
],
"notes": [
{
"category": "general",
"text": "The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1714",
"url": "https://www.suse.com/security/cve/CVE-2016-1714"
},
{
"category": "external",
"summary": "SUSE Bug 961691 for CVE-2016-1714",
"url": "https://bugzilla.suse.com/961691"
},
{
"category": "external",
"summary": "SUSE Bug 961692 for CVE-2016-1714",
"url": "https://bugzilla.suse.com/961692"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-1714"
},
{
"cve": "CVE-2016-1922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1922"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, \u0027current_cpu\u0027 remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1922",
"url": "https://www.suse.com/security/cve/CVE-2016-1922"
},
{
"category": "external",
"summary": "SUSE Bug 962320 for CVE-2016-1922",
"url": "https://bugzilla.suse.com/962320"
},
{
"category": "external",
"summary": "SUSE Bug 962321 for CVE-2016-1922",
"url": "https://bugzilla.suse.com/962321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-1922"
},
{
"cve": "CVE-2016-1981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1981"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1981",
"url": "https://www.suse.com/security/cve/CVE-2016-1981"
},
{
"category": "external",
"summary": "SUSE Bug 963782 for CVE-2016-1981",
"url": "https://bugzilla.suse.com/963782"
},
{
"category": "external",
"summary": "SUSE Bug 963783 for CVE-2016-1981",
"url": "https://bugzilla.suse.com/963783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-1981"
},
{
"cve": "CVE-2016-2198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2198"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2198",
"url": "https://www.suse.com/security/cve/CVE-2016-2198"
},
{
"category": "external",
"summary": "SUSE Bug 964413 for CVE-2016-2198",
"url": "https://bugzilla.suse.com/964413"
},
{
"category": "external",
"summary": "SUSE Bug 964415 for CVE-2016-2198",
"url": "https://bugzilla.suse.com/964415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-2198"
},
{
"cve": "CVE-2016-2270",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2270"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2270",
"url": "https://www.suse.com/security/cve/CVE-2016-2270"
},
{
"category": "external",
"summary": "SUSE Bug 965315 for CVE-2016-2270",
"url": "https://bugzilla.suse.com/965315"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-2270"
},
{
"cve": "CVE-2016-2271",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2271"
}
],
"notes": [
{
"category": "general",
"text": "VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2271",
"url": "https://www.suse.com/security/cve/CVE-2016-2271"
},
{
"category": "external",
"summary": "SUSE Bug 965317 for CVE-2016-2271",
"url": "https://bugzilla.suse.com/965317"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-2271"
},
{
"cve": "CVE-2016-2391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2391"
}
],
"notes": [
{
"category": "general",
"text": "The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2391",
"url": "https://www.suse.com/security/cve/CVE-2016-2391"
},
{
"category": "external",
"summary": "SUSE Bug 967012 for CVE-2016-2391",
"url": "https://bugzilla.suse.com/967012"
},
{
"category": "external",
"summary": "SUSE Bug 967013 for CVE-2016-2391",
"url": "https://bugzilla.suse.com/967013"
},
{
"category": "external",
"summary": "SUSE Bug 967101 for CVE-2016-2391",
"url": "https://bugzilla.suse.com/967101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-2391"
},
{
"cve": "CVE-2016-2392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2392"
}
],
"notes": [
{
"category": "general",
"text": "The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2392",
"url": "https://www.suse.com/security/cve/CVE-2016-2392"
},
{
"category": "external",
"summary": "SUSE Bug 967012 for CVE-2016-2392",
"url": "https://bugzilla.suse.com/967012"
},
{
"category": "external",
"summary": "SUSE Bug 967090 for CVE-2016-2392",
"url": "https://bugzilla.suse.com/967090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-2392"
},
{
"cve": "CVE-2016-2538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2538"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the (1) rndis_query_response, (2) rndis_set_response, or (3) usb_net_handle_dataout function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2538",
"url": "https://www.suse.com/security/cve/CVE-2016-2538"
},
{
"category": "external",
"summary": "SUSE Bug 967969 for CVE-2016-2538",
"url": "https://bugzilla.suse.com/967969"
},
{
"category": "external",
"summary": "SUSE Bug 968004 for CVE-2016-2538",
"url": "https://bugzilla.suse.com/968004"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-2538"
},
{
"cve": "CVE-2016-2841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2841"
}
],
"notes": [
{
"category": "general",
"text": "The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via crafted values for the PSTART and PSTOP registers, involving ring buffer control.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2841",
"url": "https://www.suse.com/security/cve/CVE-2016-2841"
},
{
"category": "external",
"summary": "SUSE Bug 969350 for CVE-2016-2841",
"url": "https://bugzilla.suse.com/969350"
},
{
"category": "external",
"summary": "SUSE Bug 969351 for CVE-2016-2841",
"url": "https://bugzilla.suse.com/969351"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-2841"
},
{
"cve": "CVE-2016-4439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4439"
}
],
"notes": [
{
"category": "general",
"text": "The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4439",
"url": "https://www.suse.com/security/cve/CVE-2016-4439"
},
{
"category": "external",
"summary": "SUSE Bug 980711 for CVE-2016-4439",
"url": "https://bugzilla.suse.com/980711"
},
{
"category": "external",
"summary": "SUSE Bug 980716 for CVE-2016-4439",
"url": "https://bugzilla.suse.com/980716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4439"
},
{
"cve": "CVE-2016-4441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4441"
}
],
"notes": [
{
"category": "general",
"text": "The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4441",
"url": "https://www.suse.com/security/cve/CVE-2016-4441"
},
{
"category": "external",
"summary": "SUSE Bug 980723 for CVE-2016-4441",
"url": "https://bugzilla.suse.com/980723"
},
{
"category": "external",
"summary": "SUSE Bug 980724 for CVE-2016-4441",
"url": "https://bugzilla.suse.com/980724"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-4441"
},
{
"cve": "CVE-2016-5238",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5238"
}
],
"notes": [
{
"category": "general",
"text": "The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5238",
"url": "https://www.suse.com/security/cve/CVE-2016-5238"
},
{
"category": "external",
"summary": "SUSE Bug 982959 for CVE-2016-5238",
"url": "https://bugzilla.suse.com/982959"
},
{
"category": "external",
"summary": "SUSE Bug 982960 for CVE-2016-5238",
"url": "https://bugzilla.suse.com/982960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-5238"
},
{
"cve": "CVE-2016-5338",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-5338"
}
],
"notes": [
{
"category": "general",
"text": "The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-5338",
"url": "https://www.suse.com/security/cve/CVE-2016-5338"
},
{
"category": "external",
"summary": "SUSE Bug 983982 for CVE-2016-5338",
"url": "https://bugzilla.suse.com/983982"
},
{
"category": "external",
"summary": "SUSE Bug 983984 for CVE-2016-5338",
"url": "https://bugzilla.suse.com/983984"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-5338"
},
{
"cve": "CVE-2016-6258",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6258"
}
],
"notes": [
{
"category": "general",
"text": "The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6258",
"url": "https://www.suse.com/security/cve/CVE-2016-6258"
},
{
"category": "external",
"summary": "SUSE Bug 1072198 for CVE-2016-6258",
"url": "https://bugzilla.suse.com/1072198"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2016-6258",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 988675 for CVE-2016-6258",
"url": "https://bugzilla.suse.com/988675"
},
{
"category": "external",
"summary": "SUSE Bug 988692 for CVE-2016-6258",
"url": "https://bugzilla.suse.com/988692"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-6258"
},
{
"cve": "CVE-2016-6259",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6259"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6259",
"url": "https://www.suse.com/security/cve/CVE-2016-6259"
},
{
"category": "external",
"summary": "SUSE Bug 988676 for CVE-2016-6259",
"url": "https://bugzilla.suse.com/988676"
},
{
"category": "external",
"summary": "SUSE Bug 988694 for CVE-2016-6259",
"url": "https://bugzilla.suse.com/988694"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-6259"
},
{
"cve": "CVE-2016-6351",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-6351"
}
],
"notes": [
{
"category": "general",
"text": "The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or execute arbitrary code on the QEMU host via vectors involving DMA read into ESP command buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-6351",
"url": "https://www.suse.com/security/cve/CVE-2016-6351"
},
{
"category": "external",
"summary": "SUSE Bug 990835 for CVE-2016-6351",
"url": "https://bugzilla.suse.com/990835"
},
{
"category": "external",
"summary": "SUSE Bug 990843 for CVE-2016-6351",
"url": "https://bugzilla.suse.com/990843"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2016-6351"
},
{
"cve": "CVE-2016-7092",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7092"
}
],
"notes": [
{
"category": "general",
"text": "The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7092",
"url": "https://www.suse.com/security/cve/CVE-2016-7092"
},
{
"category": "external",
"summary": "SUSE Bug 995785 for CVE-2016-7092",
"url": "https://bugzilla.suse.com/995785"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-7092"
},
{
"cve": "CVE-2016-7093",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7093"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7093",
"url": "https://www.suse.com/security/cve/CVE-2016-7093"
},
{
"category": "external",
"summary": "SUSE Bug 995789 for CVE-2016-7093",
"url": "https://bugzilla.suse.com/995789"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2016-7093"
},
{
"cve": "CVE-2016-7094",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-7094"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-7094",
"url": "https://www.suse.com/security/cve/CVE-2016-7094"
},
{
"category": "external",
"summary": "SUSE Bug 995792 for CVE-2016-7094",
"url": "https://bugzilla.suse.com/995792"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-devel-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-doc-html-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-32bit-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-libs-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-4.7.0_12-1.3.x86_64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.aarch64",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.ppc64le",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.s390x",
"openSUSE Tumbleweed:xen-tools-domU-4.7.0_12-1.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2016-7094"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…