Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2020-25602
Vulnerability from cvelistv5
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-04T15:33:05.758Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://xenbits.xen.org/xsa/advisory-333.html", }, { name: "FEDORA-2020-306b84fd07", tags: [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/", }, { name: "FEDORA-2020-f668e579be", tags: [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/", }, { name: "DSA-4769", tags: [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred", ], url: "https://www.debian.org/security/2020/dsa-4769", }, { name: "openSUSE-SU-2020:1608", tags: [ "vendor-advisory", "x_refsource_SUSE", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html", }, { name: "FEDORA-2020-d46fe34349", tags: [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/", }, { name: "GLSA-202011-06", tags: [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred", ], url: "https://security.gentoo.org/glsa/202011-06", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], descriptions: [ { lang: "en", value: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2020-11-11T05:06:33", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { tags: [ "x_refsource_MISC", ], url: "https://xenbits.xen.org/xsa/advisory-333.html", }, { name: "FEDORA-2020-306b84fd07", tags: [ "vendor-advisory", "x_refsource_FEDORA", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/", }, { name: "FEDORA-2020-f668e579be", tags: [ "vendor-advisory", "x_refsource_FEDORA", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/", }, { name: "DSA-4769", tags: [ "vendor-advisory", "x_refsource_DEBIAN", ], url: "https://www.debian.org/security/2020/dsa-4769", }, { name: "openSUSE-SU-2020:1608", tags: [ "vendor-advisory", "x_refsource_SUSE", ], url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html", }, { name: "FEDORA-2020-d46fe34349", tags: [ "vendor-advisory", "x_refsource_FEDORA", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/", }, { name: "GLSA-202011-06", tags: [ "vendor-advisory", "x_refsource_GENTOO", ], url: "https://security.gentoo.org/glsa/202011-06", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2020-25602", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "https://xenbits.xen.org/xsa/advisory-333.html", refsource: "MISC", url: "https://xenbits.xen.org/xsa/advisory-333.html", }, { name: "FEDORA-2020-306b84fd07", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/", }, { name: "FEDORA-2020-f668e579be", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/", }, { name: "DSA-4769", refsource: "DEBIAN", url: "https://www.debian.org/security/2020/dsa-4769", }, { name: "openSUSE-SU-2020:1608", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html", }, { name: "FEDORA-2020-d46fe34349", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/", }, { name: "GLSA-202011-06", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/202011-06", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2020-25602", datePublished: "2020-09-23T21:16:07", dateReserved: "2020-09-16T00:00:00", dateUpdated: "2024-08-04T15:33:05.758Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { fkie_nvd: { configurations: "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.11.0\", \"versionEndIncluding\": \"4.14.0\", \"matchCriteriaId\": \"93BEAF43-660C-496C-A44D-5922C59F2899\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80F0FA5D-8D3B-4C0E-81E2-87998286AF33\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36D96259-24BD-44E2-96D9-78CE1D41F956\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B009C22E-30A4-4288-BCF6-C3E81DEAF45A\"}]}]}]", descriptions: "[{\"lang\": \"en\", \"value\": \"An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.\"}, {\"lang\": \"es\", \"value\": \"Se detect\\u00f3 un problema en Xen versiones hasta 4.14.x. Un invitado PV x86 puede desencadenar un bloqueo del Sistema Operativo del host cuando maneja el acceso de invitado para MSR_MISC_ENABLE. Cuando un invitado accede a ciertos registros espec\\u00edficos del modelo, Xen primero lee el valor del hardware para usarlo como base para auditar el acceso de invitado. Para el MSR MISC_ENABLE, que es un MSR espec\\u00edfico de Intel, esta lectura de MSR se realiza sin manejo de errores para un fallo #GP, que es la consecuencia de intentar leer este MSR en hardware que no es de Intel. Un administrador invitado de PV con errores o malicioso puede bloquear Xen y causar una Denegaci\\u00f3n de Servicio del host. Solo los sistemas x86 son vulnerables. Los sistemas ARM no son vulnerables. Solo las versiones de Xen 4.11 y posteriores son vulnerables. Las versiones 4.10 y anteriores no son vulnerables. Solo los sistemas x86 que no implementan MISC_ENABLE MSR (0x1a0) son vulnerables. Los sistemas AMD e Hygon no implementan este MSR y son vulnerables. Los sistemas Intel implementan este MSR y no son vulnerables. No se han comprobado otros fabricantes. Solo los invitados PV x86 pueden explotar la vulnerabilidad. Los invitados HVM/PVH x86 no pueden explotar la vulnerabilidad.\"}]", id: "CVE-2020-25602", lastModified: "2024-11-21T05:18:12.690", metrics: "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\", \"baseScore\": 6.0, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.5, \"impactScore\": 4.0}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:S/C:N/I:N/A:C\", \"baseScore\": 4.6, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 3.1, \"impactScore\": 6.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}", published: "2020-09-23T22:15:13.790", references: "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://security.gentoo.org/glsa/202011-06\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2020/dsa-4769\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://xenbits.xen.org/xsa/advisory-333.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.gentoo.org/glsa/202011-06\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2020/dsa-4769\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://xenbits.xen.org/xsa/advisory-333.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]", sourceIdentifier: "cve@mitre.org", vulnStatus: "Modified", weaknesses: "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-755\"}]}]", }, nvd: "{\"cve\":{\"id\":\"CVE-2020-25602\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2020-09-23T22:15:13.790\",\"lastModified\":\"2024-11-21T05:18:12.690\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.\"},{\"lang\":\"es\",\"value\":\"Se detectó un problema en Xen versiones hasta 4.14.x. Un invitado PV x86 puede desencadenar un bloqueo del Sistema Operativo del host cuando maneja el acceso de invitado para MSR_MISC_ENABLE. Cuando un invitado accede a ciertos registros específicos del modelo, Xen primero lee el valor del hardware para usarlo como base para auditar el acceso de invitado. Para el MSR MISC_ENABLE, que es un MSR específico de Intel, esta lectura de MSR se realiza sin manejo de errores para un fallo #GP, que es la consecuencia de intentar leer este MSR en hardware que no es de Intel. Un administrador invitado de PV con errores o malicioso puede bloquear Xen y causar una Denegación de Servicio del host. Solo los sistemas x86 son vulnerables. Los sistemas ARM no son vulnerables. Solo las versiones de Xen 4.11 y posteriores son vulnerables. Las versiones 4.10 y anteriores no son vulnerables. Solo los sistemas x86 que no implementan MISC_ENABLE MSR (0x1a0) son vulnerables. Los sistemas AMD e Hygon no implementan este MSR y son vulnerables. Los sistemas Intel implementan este MSR y no son vulnerables. No se han comprobado otros fabricantes. Solo los invitados PV x86 pueden explotar la vulnerabilidad. Los invitados HVM/PVH x86 no pueden explotar la vulnerabilidad.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\",\"baseScore\":6.0,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.5,\"impactScore\":4.0}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:S/C:N/I:N/A:C\",\"baseScore\":4.6,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":3.1,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-755\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.11.0\",\"versionEndIncluding\":\"4.14.0\",\"matchCriteriaId\":\"93BEAF43-660C-496C-A44D-5922C59F2899\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80F0FA5D-8D3B-4C0E-81E2-87998286AF33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36D96259-24BD-44E2-96D9-78CE1D41F956\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B009C22E-30A4-4288-BCF6-C3E81DEAF45A\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.gentoo.org/glsa/202011-06\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2020/dsa-4769\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://xenbits.xen.org/xsa/advisory-333.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/202011-06\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2020/dsa-4769\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://xenbits.xen.org/xsa/advisory-333.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}", }, }
opensuse-su-2020:1608-1
Vulnerability from csaf_opensuse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for xen", title: "Title of the patch", }, { category: "description", text: "This update for xen fixes the following issues:\n\n- CVE-2020-25602: Fixed an issue where there was a crash when\n handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333)\n- CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path\n (bsc#1176341,XSA-334)\n- CVE-2020-25604: Fixed a race condition when migrating timers between x86 \n HVM vCPU-s (bsc#1176343,XSA-336)\n- CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)\n- CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)\n- CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)\n- CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)\n- CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)\n- CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)\n- CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)\n- Various other fixes (bsc#1027519)\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.", title: "Description of the patch", }, { category: "details", text: "openSUSE-2020-1608", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_1608-1.json", }, { category: "self", summary: "URL for openSUSE-SU-2020:1608-1", url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CHO5L6PB6IYMBMXLFOWKZSK5RTFI66UU/", }, { category: "self", summary: "E-Mail link for openSUSE-SU-2020:1608-1", url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CHO5L6PB6IYMBMXLFOWKZSK5RTFI66UU/", }, { category: "self", summary: "SUSE Bug 1027519", url: "https://bugzilla.suse.com/1027519", }, { category: "self", summary: "SUSE Bug 1176339", url: "https://bugzilla.suse.com/1176339", }, { category: "self", summary: "SUSE Bug 1176341", url: "https://bugzilla.suse.com/1176341", }, { category: "self", summary: "SUSE Bug 1176343", url: "https://bugzilla.suse.com/1176343", }, { category: "self", summary: "SUSE Bug 1176344", url: "https://bugzilla.suse.com/1176344", }, { category: "self", summary: "SUSE Bug 1176345", url: "https://bugzilla.suse.com/1176345", }, { category: "self", summary: "SUSE Bug 1176346", url: "https://bugzilla.suse.com/1176346", }, { category: "self", summary: "SUSE Bug 1176347", url: "https://bugzilla.suse.com/1176347", }, { category: "self", summary: "SUSE Bug 1176348", url: "https://bugzilla.suse.com/1176348", }, { category: "self", summary: "SUSE Bug 1176349", url: "https://bugzilla.suse.com/1176349", }, { category: "self", summary: "SUSE Bug 1176350", url: "https://bugzilla.suse.com/1176350", }, { category: "self", summary: "SUSE CVE CVE-2020-25595 page", url: "https://www.suse.com/security/cve/CVE-2020-25595/", }, { category: "self", summary: "SUSE CVE CVE-2020-25596 page", url: "https://www.suse.com/security/cve/CVE-2020-25596/", }, { category: "self", summary: "SUSE CVE CVE-2020-25597 page", url: "https://www.suse.com/security/cve/CVE-2020-25597/", }, { category: "self", summary: "SUSE CVE CVE-2020-25598 page", url: "https://www.suse.com/security/cve/CVE-2020-25598/", }, { category: "self", summary: "SUSE CVE CVE-2020-25599 page", url: "https://www.suse.com/security/cve/CVE-2020-25599/", }, { category: "self", summary: "SUSE CVE CVE-2020-25600 page", url: "https://www.suse.com/security/cve/CVE-2020-25600/", }, { category: "self", summary: "SUSE CVE CVE-2020-25601 page", url: "https://www.suse.com/security/cve/CVE-2020-25601/", }, { category: "self", summary: "SUSE CVE CVE-2020-25602 page", url: "https://www.suse.com/security/cve/CVE-2020-25602/", }, { category: "self", summary: "SUSE CVE CVE-2020-25603 page", url: "https://www.suse.com/security/cve/CVE-2020-25603/", }, { category: "self", summary: "SUSE CVE CVE-2020-25604 page", url: "https://www.suse.com/security/cve/CVE-2020-25604/", }, ], title: "Security update for xen", tracking: { current_release_date: "2020-10-04T04:23:35Z", generator: { date: "2020-10-04T04:23:35Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "openSUSE-SU-2020:1608-1", initial_release_date: "2020-10-04T04:23:35Z", revision_history: [ { date: "2020-10-04T04:23:35Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "xen-devel-4.13.1_08-lp152.2.9.1.i586", product: { name: "xen-devel-4.13.1_08-lp152.2.9.1.i586", product_id: "xen-devel-4.13.1_08-lp152.2.9.1.i586", }, }, { category: "product_version", name: "xen-libs-4.13.1_08-lp152.2.9.1.i586", product: { name: "xen-libs-4.13.1_08-lp152.2.9.1.i586", product_id: "xen-libs-4.13.1_08-lp152.2.9.1.i586", }, }, { category: "product_version", name: "xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", product: { name: "xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", product_id: "xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", product: { name: "xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", product_id: "xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", }, }, ], category: "architecture", name: "noarch", }, { branches: [ { category: "product_version", name: "xen-4.13.1_08-lp152.2.9.1.x86_64", product: { name: "xen-4.13.1_08-lp152.2.9.1.x86_64", product_id: "xen-4.13.1_08-lp152.2.9.1.x86_64", }, }, { category: "product_version", name: "xen-devel-4.13.1_08-lp152.2.9.1.x86_64", product: { name: "xen-devel-4.13.1_08-lp152.2.9.1.x86_64", product_id: "xen-devel-4.13.1_08-lp152.2.9.1.x86_64", }, }, { category: "product_version", name: "xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", product: { name: "xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", product_id: "xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", }, }, { category: "product_version", name: "xen-libs-4.13.1_08-lp152.2.9.1.x86_64", product: { name: "xen-libs-4.13.1_08-lp152.2.9.1.x86_64", product_id: "xen-libs-4.13.1_08-lp152.2.9.1.x86_64", }, }, { category: "product_version", name: "xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", product: { name: "xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", product_id: "xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", }, }, { category: "product_version", name: "xen-tools-4.13.1_08-lp152.2.9.1.x86_64", product: { name: "xen-tools-4.13.1_08-lp152.2.9.1.x86_64", product_id: "xen-tools-4.13.1_08-lp152.2.9.1.x86_64", }, }, { category: "product_version", name: "xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", product: { name: "xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", product_id: "xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "openSUSE Leap 15.2", product: { name: "openSUSE Leap 15.2", product_id: "openSUSE Leap 15.2", product_identification_helper: { cpe: "cpe:/o:opensuse:leap:15.2", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "xen-4.13.1_08-lp152.2.9.1.x86_64 as component of openSUSE Leap 15.2", product_id: "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", }, product_reference: "xen-4.13.1_08-lp152.2.9.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.2", }, { category: "default_component_of", full_product_name: { name: "xen-devel-4.13.1_08-lp152.2.9.1.i586 as component of openSUSE Leap 15.2", product_id: "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", }, product_reference: "xen-devel-4.13.1_08-lp152.2.9.1.i586", relates_to_product_reference: "openSUSE Leap 15.2", }, { category: "default_component_of", full_product_name: { name: "xen-devel-4.13.1_08-lp152.2.9.1.x86_64 as component of openSUSE Leap 15.2", product_id: "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", }, product_reference: "xen-devel-4.13.1_08-lp152.2.9.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.2", }, { category: "default_component_of", full_product_name: { name: "xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64 as component of openSUSE Leap 15.2", product_id: "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", }, product_reference: "xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.2", }, { category: "default_component_of", full_product_name: { name: "xen-libs-4.13.1_08-lp152.2.9.1.i586 as component of openSUSE Leap 15.2", product_id: "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", }, product_reference: "xen-libs-4.13.1_08-lp152.2.9.1.i586", relates_to_product_reference: "openSUSE Leap 15.2", }, { category: "default_component_of", full_product_name: { name: "xen-libs-4.13.1_08-lp152.2.9.1.x86_64 as component of openSUSE Leap 15.2", product_id: "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", }, product_reference: "xen-libs-4.13.1_08-lp152.2.9.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.2", }, { category: "default_component_of", full_product_name: { name: "xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64 as component of openSUSE Leap 15.2", product_id: "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", }, product_reference: "xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.2", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.13.1_08-lp152.2.9.1.x86_64 as component of openSUSE Leap 15.2", product_id: "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", }, product_reference: "xen-tools-4.13.1_08-lp152.2.9.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.2", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.13.1_08-lp152.2.9.1.i586 as component of openSUSE Leap 15.2", product_id: "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", }, product_reference: "xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", relates_to_product_reference: "openSUSE Leap 15.2", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64 as component of openSUSE Leap 15.2", product_id: "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", }, product_reference: "xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", relates_to_product_reference: "openSUSE Leap 15.2", }, { category: "default_component_of", full_product_name: { name: "xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch as component of openSUSE Leap 15.2", product_id: "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", }, product_reference: "xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", relates_to_product_reference: "openSUSE Leap 15.2", }, ], }, vulnerabilities: [ { cve: "CVE-2020-25595", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25595", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitized values read back from device hardware registers. While devices strictly compliant with PCI specifications shouldn't be able to affect these registers, experience shows that it's very common for devices to have out-of-spec \"backdoor\" operations that can affect the result of these reads. A not fully trusted guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. Privilege escalation and information leaks cannot be excluded. All versions of Xen supporting PCI passthrough are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only guests with passed through PCI devices may be able to leverage the vulnerability. Only systems passing through devices with out-of-spec (\"backdoor\") functionality can cause issues. Experience shows that such out-of-spec functionality is common; unless you have reason to believe that your device does not have such functionality, it's better to assume that it does.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25595", url: "https://www.suse.com/security/cve/CVE-2020-25595", }, { category: "external", summary: "SUSE Bug 1176344 for CVE-2020-25595", url: "https://bugzilla.suse.com/1176344", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25595", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-10-04T04:23:35Z", details: "important", }, ], title: "CVE-2020-25595", }, { cve: "CVE-2020-25596", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25596", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault, and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel, resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel, Centaur, and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25596", url: "https://www.suse.com/security/cve/CVE-2020-25596", }, { category: "external", summary: "SUSE Bug 1176345 for CVE-2020-25596", url: "https://bugzilla.suse.com/1176345", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25596", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-10-04T04:23:35Z", details: "moderate", }, ], title: "CVE-2020-25596", }, { cve: "CVE-2020-25597", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25597", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once-valid event channels may not turn invalid. Logic in the handling of event channel operations in Xen assumes that an event channel, once valid, will not become invalid over the life time of a guest. However, operations like the resetting of all event channels may involve decreasing one of the bounds checked when determining validity. This may lead to bug checks triggering, crashing the host. An unprivileged guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only systems with untrusted guests permitted to create more than the default number of event channels are vulnerable. This number depends on the architecture and type of guest. For 32-bit x86 PV guests, this is 1023; for 64-bit x86 PV guests, and for all ARM guests, this number is 4095. Systems where untrusted guests are limited to fewer than this number are not vulnerable. Note that xl and libxl limit max_event_channels to 1023 by default, so systems using exclusively xl, libvirt+libxl, or their own toolstack based on libxl, and not explicitly setting max_event_channels, are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25597", url: "https://www.suse.com/security/cve/CVE-2020-25597", }, { category: "external", summary: "SUSE Bug 1176346 for CVE-2020-25597", url: "https://bugzilla.suse.com/1176346", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-10-04T04:23:35Z", details: "moderate", }, ], title: "CVE-2020-25597", }, { cve: "CVE-2020-25598", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25598", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource error path. The RCU (Read, Copy, Update) mechanism is a synchronisation primitive. A buggy error path in the XENMEM_acquire_resource exits without releasing an RCU reference, which is conceptually similar to forgetting to unlock a spinlock. A buggy or malicious HVM stubdomain can cause an RCU reference to be leaked. This causes subsequent administration operations, (e.g., CPU offline) to livelock, resulting in a host Denial of Service. The buggy codepath has been present since Xen 4.12. Xen 4.14 and later are vulnerable to the DoS. The side effects are believed to be benign on Xen 4.12 and 4.13, but patches are provided nevertheless. The vulnerability can generally only be exploited by x86 HVM VMs, as these are generally the only type of VM that have a Qemu stubdomain. x86 PV and PVH domains, as well as ARM VMs, typically don't use a stubdomain. Only VMs using HVM stubdomains can exploit the vulnerability. VMs using PV stubdomains, or with emulators running in dom0, cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25598", url: "https://www.suse.com/security/cve/CVE-2020-25598", }, { category: "external", summary: "SUSE Bug 1176341 for CVE-2020-25598", url: "https://bugzilla.suse.com/1176341", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-10-04T04:23:35Z", details: "moderate", }, ], title: "CVE-2020-25598", }, { cve: "CVE-2020-25599", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25599", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of EVTCHNOP_reset (potentially by a guest on itself) or XEN_DOMCTL_soft_reset (by itself covered by XSA-77) can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses or triggering of bug checks. In particular, x86 PV guests may be able to elevate their privilege to that of the host. Host and guest crashes are also possible, leading to a Denial of Service (DoS). Information leaks cannot be ruled out. All Xen versions from 4.5 onwards are vulnerable. Xen versions 4.4 and earlier are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25599", url: "https://www.suse.com/security/cve/CVE-2020-25599", }, { category: "external", summary: "SUSE Bug 1176349 for CVE-2020-25599", url: "https://bugzilla.suse.com/1176349", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-10-04T04:23:35Z", details: "important", }, ], title: "CVE-2020-25599", }, { cve: "CVE-2020-25600", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25600", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm (either bitness) ones. 32-bit x86 domains can use only 1023 channels, due to limited space in their shared (between guest and Xen) information structure, whereas all other domains can use up to 4095 in this model. The recording of the respective limit during domain initialization, however, has occurred at a time where domains are still deemed to be 64-bit ones, prior to actually honoring respective domain properties. At the point domains get recognized as 32-bit ones, the limit didn't get updated accordingly. Due to this misbehavior in Xen, 32-bit domains (including Domain 0) servicing other domains may observe event channel allocations to succeed when they should really fail. Subsequent use of such event channels would then possibly lead to corruption of other parts of the shared info structure. An unprivileged guest may cause another domain, in particular Domain 0, to misbehave. This may lead to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only x86 32-bit domains servicing other domains are vulnerable. Arm systems, as well as x86 64-bit domains, are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25600", url: "https://www.suse.com/security/cve/CVE-2020-25600", }, { category: "external", summary: "SUSE Bug 1176348 for CVE-2020-25600", url: "https://bugzilla.suse.com/1176348", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-10-04T04:23:35Z", details: "important", }, ], title: "CVE-2020-25600", }, { cve: "CVE-2020-25601", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25601", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() / evtchn_destroy(). In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these (when resetting all event channels or when cleaning up after the guest) may take extended periods of time. So far, there was no arrangement for preemption at suitable intervals, allowing a CPU to spend an almost unbounded amount of time in the processing of these operations. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. All Xen versions are vulnerable in principle. Whether versions 4.3 and older are vulnerable depends on underlying hardware characteristics.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25601", url: "https://www.suse.com/security/cve/CVE-2020-25601", }, { category: "external", summary: "SUSE Bug 1176350 for CVE-2020-25601", url: "https://bugzilla.suse.com/1176350", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-10-04T04:23:35Z", details: "moderate", }, ], title: "CVE-2020-25601", }, { cve: "CVE-2020-25602", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25602", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25602", url: "https://www.suse.com/security/cve/CVE-2020-25602", }, { category: "external", summary: "SUSE Bug 1176339 for CVE-2020-25602", url: "https://bugzilla.suse.com/1176339", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 6.2, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-10-04T04:23:35Z", details: "moderate", }, ], title: "CVE-2020-25602", }, { cve: "CVE-2020-25603", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25603", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such a sequence is missing an appropriate memory barrier (e.g., smp_*mb()) to prevent both the compiler and CPU from re-ordering access. A malicious guest may be able to cause a hypervisor crash resulting in a Denial of Service (DoS). Information leak and privilege escalation cannot be excluded. Systems running all versions of Xen are affected. Whether a system is vulnerable will depend on the CPU and compiler used to build Xen. For all systems, the presence and the scope of the vulnerability depend on the precise re-ordering performed by the compiler used to build Xen. We have not been able to survey compilers; consequently we cannot say which compiler(s) might produce vulnerable code (with which code generation options). GCC documentation clearly suggests that re-ordering is possible. Arm systems will also be vulnerable if the CPU is able to re-order memory access. Please consult your CPU vendor. x86 systems are only vulnerable if a compiler performs re-ordering.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25603", url: "https://www.suse.com/security/cve/CVE-2020-25603", }, { category: "external", summary: "SUSE Bug 1176347 for CVE-2020-25603", url: "https://bugzilla.suse.com/1176347", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25603", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-10-04T04:23:35Z", details: "important", }, ], title: "CVE-2020-25603", }, { cve: "CVE-2020-25604", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25604", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. When migrating timers of x86 HVM guests between its vCPUs, the locking model used allows for a second vCPU of the same guest (also operating on the timers) to release a lock that it didn't acquire. The most likely effect of the issue is a hang or crash of the hypervisor, i.e., a Denial of Service (DoS). All versions of Xen are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only x86 HVM guests can leverage the vulnerability. x86 PV and PVH cannot leverage the vulnerability. Only guests with more than one vCPU can exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25604", url: "https://www.suse.com/security/cve/CVE-2020-25604", }, { category: "external", summary: "SUSE Bug 1176343 for CVE-2020-25604", url: "https://bugzilla.suse.com/1176343", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25604", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Leap 15.2:xen-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-devel-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-doc-html-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-32bit-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-libs-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.i586", "openSUSE Leap 15.2:xen-tools-domU-4.13.1_08-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:xen-tools-xendomains-wait-disk-4.13.1_08-lp152.2.9.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-10-04T04:23:35Z", details: "moderate", }, ], title: "CVE-2020-25604", }, ], }
opensuse-su-2024:11520-1
Vulnerability from csaf_opensuse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "xen-4.15.1_01-1.2 on GA media", title: "Title of the patch", }, { category: "description", text: "These are all security issues fixed in the xen-4.15.1_01-1.2 package on the GA media of openSUSE Tumbleweed.", title: "Description of the patch", }, { category: "details", text: "openSUSE-Tumbleweed-2024-11520", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11520-1.json", }, { category: "self", summary: "SUSE CVE CVE-2007-1320 page", url: "https://www.suse.com/security/cve/CVE-2007-1320/", }, { category: "self", summary: "SUSE CVE CVE-2007-1366 page", url: "https://www.suse.com/security/cve/CVE-2007-1366/", }, { category: "self", summary: "SUSE CVE CVE-2007-3919 page", url: "https://www.suse.com/security/cve/CVE-2007-3919/", }, { category: "self", summary: "SUSE CVE CVE-2016-10013 page", url: "https://www.suse.com/security/cve/CVE-2016-10013/", }, { category: "self", summary: "SUSE CVE CVE-2016-10024 page", url: "https://www.suse.com/security/cve/CVE-2016-10024/", }, { category: "self", summary: "SUSE CVE CVE-2016-10025 page", url: "https://www.suse.com/security/cve/CVE-2016-10025/", }, { category: "self", summary: "SUSE CVE CVE-2016-7777 page", url: "https://www.suse.com/security/cve/CVE-2016-7777/", }, { category: "self", summary: "SUSE CVE CVE-2016-7908 page", url: "https://www.suse.com/security/cve/CVE-2016-7908/", }, { category: "self", summary: "SUSE CVE CVE-2016-7909 page", url: "https://www.suse.com/security/cve/CVE-2016-7909/", }, { category: "self", summary: "SUSE CVE CVE-2016-8667 page", url: "https://www.suse.com/security/cve/CVE-2016-8667/", }, { category: "self", summary: "SUSE CVE CVE-2016-8669 page", url: "https://www.suse.com/security/cve/CVE-2016-8669/", }, { category: "self", summary: "SUSE CVE CVE-2016-8910 page", url: "https://www.suse.com/security/cve/CVE-2016-8910/", }, { category: "self", summary: "SUSE CVE CVE-2016-9377 page", url: "https://www.suse.com/security/cve/CVE-2016-9377/", }, { category: "self", summary: "SUSE CVE CVE-2016-9379 page", url: "https://www.suse.com/security/cve/CVE-2016-9379/", }, { category: "self", summary: "SUSE CVE CVE-2016-9381 page", url: "https://www.suse.com/security/cve/CVE-2016-9381/", }, { category: "self", summary: "SUSE CVE CVE-2016-9382 page", url: "https://www.suse.com/security/cve/CVE-2016-9382/", }, { category: "self", summary: "SUSE CVE CVE-2016-9383 page", url: "https://www.suse.com/security/cve/CVE-2016-9383/", }, { category: "self", summary: "SUSE CVE CVE-2016-9384 page", url: "https://www.suse.com/security/cve/CVE-2016-9384/", }, { category: "self", summary: "SUSE CVE CVE-2016-9385 page", url: "https://www.suse.com/security/cve/CVE-2016-9385/", }, { category: "self", summary: "SUSE CVE CVE-2016-9386 page", url: "https://www.suse.com/security/cve/CVE-2016-9386/", }, { category: "self", summary: "SUSE CVE CVE-2016-9637 page", url: "https://www.suse.com/security/cve/CVE-2016-9637/", }, { category: "self", summary: "SUSE CVE CVE-2016-9921 page", url: "https://www.suse.com/security/cve/CVE-2016-9921/", }, { category: "self", summary: "SUSE CVE CVE-2016-9932 page", url: "https://www.suse.com/security/cve/CVE-2016-9932/", }, { category: "self", summary: "SUSE CVE CVE-2017-12135 page", url: "https://www.suse.com/security/cve/CVE-2017-12135/", }, { category: "self", summary: "SUSE CVE CVE-2017-12136 page", url: "https://www.suse.com/security/cve/CVE-2017-12136/", }, { category: "self", summary: "SUSE CVE CVE-2017-12137 page", url: "https://www.suse.com/security/cve/CVE-2017-12137/", }, { category: "self", summary: "SUSE CVE CVE-2017-2615 page", url: "https://www.suse.com/security/cve/CVE-2017-2615/", }, { category: "self", summary: "SUSE CVE CVE-2017-2620 page", url: "https://www.suse.com/security/cve/CVE-2017-2620/", }, { category: "self", summary: "SUSE CVE CVE-2017-5753 page", url: "https://www.suse.com/security/cve/CVE-2017-5753/", }, { category: "self", summary: "SUSE CVE CVE-2017-6505 page", url: "https://www.suse.com/security/cve/CVE-2017-6505/", }, { category: "self", summary: "SUSE CVE CVE-2017-8309 page", url: "https://www.suse.com/security/cve/CVE-2017-8309/", }, { category: "self", summary: "SUSE CVE CVE-2017-9330 page", url: "https://www.suse.com/security/cve/CVE-2017-9330/", }, { category: "self", summary: "SUSE CVE CVE-2018-10471 page", url: "https://www.suse.com/security/cve/CVE-2018-10471/", }, { category: "self", summary: "SUSE CVE CVE-2018-10472 page", url: "https://www.suse.com/security/cve/CVE-2018-10472/", }, { category: "self", summary: "SUSE CVE CVE-2018-10981 page", url: "https://www.suse.com/security/cve/CVE-2018-10981/", }, { category: "self", summary: "SUSE CVE CVE-2018-10982 page", url: "https://www.suse.com/security/cve/CVE-2018-10982/", }, { category: "self", summary: "SUSE CVE CVE-2018-12126 page", url: "https://www.suse.com/security/cve/CVE-2018-12126/", }, { category: "self", summary: "SUSE CVE CVE-2018-12891 page", url: "https://www.suse.com/security/cve/CVE-2018-12891/", }, { category: "self", summary: "SUSE CVE CVE-2018-12892 page", url: "https://www.suse.com/security/cve/CVE-2018-12892/", }, { category: "self", summary: "SUSE CVE CVE-2018-12893 page", url: "https://www.suse.com/security/cve/CVE-2018-12893/", }, { category: "self", summary: "SUSE CVE CVE-2018-15468 page", url: "https://www.suse.com/security/cve/CVE-2018-15468/", }, { category: "self", summary: "SUSE CVE CVE-2018-15469 page", url: "https://www.suse.com/security/cve/CVE-2018-15469/", }, { category: "self", summary: "SUSE CVE CVE-2018-15470 page", url: "https://www.suse.com/security/cve/CVE-2018-15470/", }, { category: "self", summary: "SUSE CVE CVE-2018-18883 page", url: "https://www.suse.com/security/cve/CVE-2018-18883/", }, { category: "self", summary: "SUSE CVE CVE-2018-19961 page", url: "https://www.suse.com/security/cve/CVE-2018-19961/", }, { category: "self", summary: "SUSE CVE CVE-2018-19963 page", url: "https://www.suse.com/security/cve/CVE-2018-19963/", }, { category: "self", summary: "SUSE CVE CVE-2018-19964 page", url: "https://www.suse.com/security/cve/CVE-2018-19964/", }, { category: "self", summary: "SUSE CVE CVE-2018-19965 page", url: "https://www.suse.com/security/cve/CVE-2018-19965/", }, { category: "self", summary: "SUSE CVE CVE-2018-19966 page", url: "https://www.suse.com/security/cve/CVE-2018-19966/", }, { category: "self", summary: "SUSE CVE CVE-2018-19967 page", url: "https://www.suse.com/security/cve/CVE-2018-19967/", }, { category: "self", summary: "SUSE CVE CVE-2018-3639 page", url: "https://www.suse.com/security/cve/CVE-2018-3639/", }, { category: "self", summary: "SUSE CVE CVE-2018-3646 page", url: "https://www.suse.com/security/cve/CVE-2018-3646/", }, { category: "self", summary: "SUSE CVE CVE-2018-3665 page", url: "https://www.suse.com/security/cve/CVE-2018-3665/", }, { category: "self", summary: "SUSE CVE CVE-2018-5244 page", url: "https://www.suse.com/security/cve/CVE-2018-5244/", }, { category: "self", summary: "SUSE CVE CVE-2018-7540 page", url: "https://www.suse.com/security/cve/CVE-2018-7540/", }, { category: "self", summary: "SUSE CVE CVE-2018-7541 page", url: "https://www.suse.com/security/cve/CVE-2018-7541/", }, { category: "self", summary: "SUSE CVE CVE-2018-7542 page", url: "https://www.suse.com/security/cve/CVE-2018-7542/", }, { category: "self", summary: "SUSE CVE CVE-2018-8897 page", url: "https://www.suse.com/security/cve/CVE-2018-8897/", }, { category: "self", summary: "SUSE CVE CVE-2019-17349 page", url: "https://www.suse.com/security/cve/CVE-2019-17349/", }, { category: "self", summary: "SUSE CVE CVE-2020-0543 page", url: "https://www.suse.com/security/cve/CVE-2020-0543/", }, { category: "self", summary: "SUSE CVE CVE-2020-11739 page", url: "https://www.suse.com/security/cve/CVE-2020-11739/", }, { category: "self", summary: "SUSE CVE CVE-2020-11740 page", url: "https://www.suse.com/security/cve/CVE-2020-11740/", }, { category: "self", summary: "SUSE CVE CVE-2020-11742 page", url: "https://www.suse.com/security/cve/CVE-2020-11742/", }, { category: "self", summary: "SUSE CVE CVE-2020-11743 page", url: "https://www.suse.com/security/cve/CVE-2020-11743/", }, { category: "self", summary: "SUSE CVE CVE-2020-15563 page", url: "https://www.suse.com/security/cve/CVE-2020-15563/", }, { category: "self", summary: "SUSE CVE CVE-2020-15565 page", url: "https://www.suse.com/security/cve/CVE-2020-15565/", }, { category: "self", summary: "SUSE CVE CVE-2020-15566 page", url: "https://www.suse.com/security/cve/CVE-2020-15566/", }, { category: "self", summary: "SUSE CVE CVE-2020-15567 page", url: "https://www.suse.com/security/cve/CVE-2020-15567/", }, { category: "self", summary: "SUSE CVE CVE-2020-25595 page", url: "https://www.suse.com/security/cve/CVE-2020-25595/", }, { category: "self", summary: "SUSE CVE CVE-2020-25596 page", url: "https://www.suse.com/security/cve/CVE-2020-25596/", }, { category: "self", summary: "SUSE CVE CVE-2020-25597 page", url: "https://www.suse.com/security/cve/CVE-2020-25597/", }, { category: "self", summary: "SUSE CVE CVE-2020-25598 page", url: "https://www.suse.com/security/cve/CVE-2020-25598/", }, { category: "self", summary: "SUSE CVE CVE-2020-25599 page", url: "https://www.suse.com/security/cve/CVE-2020-25599/", }, { category: "self", summary: "SUSE CVE CVE-2020-25600 page", url: "https://www.suse.com/security/cve/CVE-2020-25600/", }, { category: "self", summary: "SUSE CVE CVE-2020-25601 page", url: "https://www.suse.com/security/cve/CVE-2020-25601/", }, { category: "self", summary: "SUSE CVE CVE-2020-25602 page", url: "https://www.suse.com/security/cve/CVE-2020-25602/", }, { category: "self", summary: "SUSE CVE CVE-2020-25603 page", url: "https://www.suse.com/security/cve/CVE-2020-25603/", }, { category: "self", summary: "SUSE CVE CVE-2020-25604 page", url: "https://www.suse.com/security/cve/CVE-2020-25604/", }, { category: "self", summary: "SUSE CVE CVE-2020-27670 page", url: "https://www.suse.com/security/cve/CVE-2020-27670/", }, { category: "self", summary: "SUSE CVE CVE-2020-27671 page", url: "https://www.suse.com/security/cve/CVE-2020-27671/", }, { category: "self", summary: "SUSE CVE CVE-2020-27672 page", url: "https://www.suse.com/security/cve/CVE-2020-27672/", }, { category: "self", summary: "SUSE CVE CVE-2020-27674 page", url: "https://www.suse.com/security/cve/CVE-2020-27674/", }, { category: "self", summary: "SUSE CVE CVE-2020-28368 page", url: "https://www.suse.com/security/cve/CVE-2020-28368/", }, { category: "self", summary: "SUSE CVE CVE-2020-29040 page", url: "https://www.suse.com/security/cve/CVE-2020-29040/", }, { category: "self", summary: "SUSE CVE CVE-2020-29480 page", url: "https://www.suse.com/security/cve/CVE-2020-29480/", }, { category: "self", summary: "SUSE CVE CVE-2020-29481 page", url: "https://www.suse.com/security/cve/CVE-2020-29481/", }, { category: "self", summary: "SUSE CVE CVE-2020-29483 page", url: "https://www.suse.com/security/cve/CVE-2020-29483/", }, { category: "self", summary: "SUSE CVE CVE-2020-29484 page", url: "https://www.suse.com/security/cve/CVE-2020-29484/", }, { category: "self", summary: "SUSE CVE CVE-2020-29566 page", url: "https://www.suse.com/security/cve/CVE-2020-29566/", }, { category: "self", summary: "SUSE CVE CVE-2020-29567 page", url: "https://www.suse.com/security/cve/CVE-2020-29567/", }, { category: "self", summary: "SUSE CVE CVE-2020-29570 page", url: "https://www.suse.com/security/cve/CVE-2020-29570/", }, { category: "self", summary: "SUSE CVE CVE-2020-29571 page", url: "https://www.suse.com/security/cve/CVE-2020-29571/", }, { category: "self", summary: "SUSE CVE CVE-2021-28687 page", url: "https://www.suse.com/security/cve/CVE-2021-28687/", }, ], title: "xen-4.15.1_01-1.2 on GA media", tracking: { current_release_date: "2024-06-15T00:00:00Z", generator: { date: "2024-06-15T00:00:00Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "openSUSE-SU-2024:11520-1", initial_release_date: "2024-06-15T00:00:00Z", revision_history: [ { date: "2024-06-15T00:00:00Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "xen-4.15.1_01-1.2.aarch64", product: { name: "xen-4.15.1_01-1.2.aarch64", product_id: "xen-4.15.1_01-1.2.aarch64", }, }, { category: "product_version", name: "xen-devel-4.15.1_01-1.2.aarch64", product: { name: "xen-devel-4.15.1_01-1.2.aarch64", product_id: "xen-devel-4.15.1_01-1.2.aarch64", }, }, { category: "product_version", name: "xen-doc-html-4.15.1_01-1.2.aarch64", product: { name: "xen-doc-html-4.15.1_01-1.2.aarch64", product_id: "xen-doc-html-4.15.1_01-1.2.aarch64", }, }, { category: "product_version", name: "xen-libs-4.15.1_01-1.2.aarch64", product: { name: "xen-libs-4.15.1_01-1.2.aarch64", product_id: "xen-libs-4.15.1_01-1.2.aarch64", }, }, { category: "product_version", name: "xen-libs-32bit-4.15.1_01-1.2.aarch64", product: { name: "xen-libs-32bit-4.15.1_01-1.2.aarch64", product_id: "xen-libs-32bit-4.15.1_01-1.2.aarch64", }, }, { category: "product_version", name: "xen-tools-4.15.1_01-1.2.aarch64", product: { name: "xen-tools-4.15.1_01-1.2.aarch64", product_id: "xen-tools-4.15.1_01-1.2.aarch64", }, }, { category: "product_version", name: "xen-tools-domU-4.15.1_01-1.2.aarch64", product: { name: "xen-tools-domU-4.15.1_01-1.2.aarch64", product_id: "xen-tools-domU-4.15.1_01-1.2.aarch64", }, }, { category: "product_version", name: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", product: { name: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", product_id: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "xen-4.15.1_01-1.2.ppc64le", product: { name: "xen-4.15.1_01-1.2.ppc64le", product_id: "xen-4.15.1_01-1.2.ppc64le", }, }, { category: "product_version", name: "xen-devel-4.15.1_01-1.2.ppc64le", product: { name: "xen-devel-4.15.1_01-1.2.ppc64le", product_id: "xen-devel-4.15.1_01-1.2.ppc64le", }, }, { category: "product_version", name: "xen-doc-html-4.15.1_01-1.2.ppc64le", product: { name: "xen-doc-html-4.15.1_01-1.2.ppc64le", product_id: "xen-doc-html-4.15.1_01-1.2.ppc64le", }, }, { category: "product_version", name: "xen-libs-4.15.1_01-1.2.ppc64le", product: { name: "xen-libs-4.15.1_01-1.2.ppc64le", product_id: "xen-libs-4.15.1_01-1.2.ppc64le", }, }, { category: "product_version", name: "xen-libs-32bit-4.15.1_01-1.2.ppc64le", product: { name: "xen-libs-32bit-4.15.1_01-1.2.ppc64le", product_id: "xen-libs-32bit-4.15.1_01-1.2.ppc64le", }, }, { category: "product_version", name: "xen-tools-4.15.1_01-1.2.ppc64le", product: { name: "xen-tools-4.15.1_01-1.2.ppc64le", product_id: "xen-tools-4.15.1_01-1.2.ppc64le", }, }, { category: "product_version", name: "xen-tools-domU-4.15.1_01-1.2.ppc64le", product: { name: "xen-tools-domU-4.15.1_01-1.2.ppc64le", product_id: "xen-tools-domU-4.15.1_01-1.2.ppc64le", }, }, { category: "product_version", name: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", product: { name: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", product_id: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "xen-4.15.1_01-1.2.s390x", product: { name: "xen-4.15.1_01-1.2.s390x", product_id: "xen-4.15.1_01-1.2.s390x", }, }, { category: "product_version", name: "xen-devel-4.15.1_01-1.2.s390x", product: { name: "xen-devel-4.15.1_01-1.2.s390x", product_id: "xen-devel-4.15.1_01-1.2.s390x", }, }, { category: "product_version", name: "xen-doc-html-4.15.1_01-1.2.s390x", product: { name: "xen-doc-html-4.15.1_01-1.2.s390x", product_id: "xen-doc-html-4.15.1_01-1.2.s390x", }, }, { category: "product_version", name: "xen-libs-4.15.1_01-1.2.s390x", product: { name: "xen-libs-4.15.1_01-1.2.s390x", product_id: "xen-libs-4.15.1_01-1.2.s390x", }, }, { category: "product_version", name: "xen-libs-32bit-4.15.1_01-1.2.s390x", product: { name: "xen-libs-32bit-4.15.1_01-1.2.s390x", product_id: "xen-libs-32bit-4.15.1_01-1.2.s390x", }, }, { category: "product_version", name: "xen-tools-4.15.1_01-1.2.s390x", product: { name: "xen-tools-4.15.1_01-1.2.s390x", product_id: "xen-tools-4.15.1_01-1.2.s390x", }, }, { category: "product_version", name: "xen-tools-domU-4.15.1_01-1.2.s390x", product: { name: "xen-tools-domU-4.15.1_01-1.2.s390x", product_id: "xen-tools-domU-4.15.1_01-1.2.s390x", }, }, { category: "product_version", name: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", product: { name: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", product_id: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "xen-4.15.1_01-1.2.x86_64", product: { name: "xen-4.15.1_01-1.2.x86_64", product_id: "xen-4.15.1_01-1.2.x86_64", }, }, { category: "product_version", name: "xen-devel-4.15.1_01-1.2.x86_64", product: { name: "xen-devel-4.15.1_01-1.2.x86_64", product_id: "xen-devel-4.15.1_01-1.2.x86_64", }, }, { category: "product_version", name: "xen-doc-html-4.15.1_01-1.2.x86_64", product: { name: "xen-doc-html-4.15.1_01-1.2.x86_64", product_id: "xen-doc-html-4.15.1_01-1.2.x86_64", }, }, { category: "product_version", name: "xen-libs-4.15.1_01-1.2.x86_64", product: { name: "xen-libs-4.15.1_01-1.2.x86_64", product_id: "xen-libs-4.15.1_01-1.2.x86_64", }, }, { category: "product_version", name: "xen-libs-32bit-4.15.1_01-1.2.x86_64", product: { name: "xen-libs-32bit-4.15.1_01-1.2.x86_64", product_id: "xen-libs-32bit-4.15.1_01-1.2.x86_64", }, }, { category: "product_version", name: "xen-tools-4.15.1_01-1.2.x86_64", product: { name: "xen-tools-4.15.1_01-1.2.x86_64", product_id: "xen-tools-4.15.1_01-1.2.x86_64", }, }, { category: "product_version", name: "xen-tools-domU-4.15.1_01-1.2.x86_64", product: { name: "xen-tools-domU-4.15.1_01-1.2.x86_64", product_id: "xen-tools-domU-4.15.1_01-1.2.x86_64", }, }, { category: "product_version", name: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", product: { name: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", product_id: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "openSUSE Tumbleweed", product: { name: "openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed", product_identification_helper: { cpe: "cpe:/o:opensuse:tumbleweed", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "xen-4.15.1_01-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", }, product_reference: "xen-4.15.1_01-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-4.15.1_01-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", }, product_reference: "xen-4.15.1_01-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-4.15.1_01-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", }, product_reference: "xen-4.15.1_01-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-4.15.1_01-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", }, product_reference: "xen-4.15.1_01-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-devel-4.15.1_01-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", }, product_reference: "xen-devel-4.15.1_01-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-devel-4.15.1_01-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", }, product_reference: "xen-devel-4.15.1_01-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-devel-4.15.1_01-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", }, product_reference: "xen-devel-4.15.1_01-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-devel-4.15.1_01-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", }, product_reference: "xen-devel-4.15.1_01-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-doc-html-4.15.1_01-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", }, product_reference: "xen-doc-html-4.15.1_01-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-doc-html-4.15.1_01-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", }, product_reference: "xen-doc-html-4.15.1_01-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-doc-html-4.15.1_01-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", }, product_reference: "xen-doc-html-4.15.1_01-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-doc-html-4.15.1_01-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", }, product_reference: "xen-doc-html-4.15.1_01-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-libs-4.15.1_01-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", }, product_reference: "xen-libs-4.15.1_01-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-libs-4.15.1_01-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", }, product_reference: "xen-libs-4.15.1_01-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-libs-4.15.1_01-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", }, product_reference: "xen-libs-4.15.1_01-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-libs-4.15.1_01-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", }, product_reference: "xen-libs-4.15.1_01-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-libs-32bit-4.15.1_01-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", }, product_reference: "xen-libs-32bit-4.15.1_01-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-libs-32bit-4.15.1_01-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", }, product_reference: "xen-libs-32bit-4.15.1_01-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-libs-32bit-4.15.1_01-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", }, product_reference: "xen-libs-32bit-4.15.1_01-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-libs-32bit-4.15.1_01-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", }, product_reference: "xen-libs-32bit-4.15.1_01-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.15.1_01-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", }, product_reference: "xen-tools-4.15.1_01-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.15.1_01-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", }, product_reference: "xen-tools-4.15.1_01-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.15.1_01-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", }, product_reference: "xen-tools-4.15.1_01-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.15.1_01-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", }, product_reference: "xen-tools-4.15.1_01-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.15.1_01-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", }, product_reference: "xen-tools-domU-4.15.1_01-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.15.1_01-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", }, product_reference: "xen-tools-domU-4.15.1_01-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.15.1_01-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", }, product_reference: "xen-tools-domU-4.15.1_01-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.15.1_01-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", }, product_reference: "xen-tools-domU-4.15.1_01-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", }, product_reference: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", }, product_reference: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", }, product_reference: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", }, product_reference: "xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, ], }, vulnerabilities: [ { cve: "CVE-2007-1320", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2007-1320", }, ], notes: [ { category: "general", text: "Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via unspecified vectors related to \"attempting to mark non-existent regions as dirty,\" aka the \"bitblt\" heap overflow.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2007-1320", url: "https://www.suse.com/security/cve/CVE-2007-1320", }, { category: "external", summary: "SUSE Bug 252519 for CVE-2007-1320", url: "https://bugzilla.suse.com/252519", }, { category: "external", summary: "SUSE Bug 270621 for CVE-2007-1320", url: "https://bugzilla.suse.com/270621", }, { category: "external", summary: "SUSE Bug 435135 for CVE-2007-1320", url: "https://bugzilla.suse.com/435135", }, { category: "external", summary: "SUSE Bug 448551 for CVE-2007-1320", url: "https://bugzilla.suse.com/448551", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2007-1320", }, { cve: "CVE-2007-1366", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2007-1366", }, ], notes: [ { category: "general", text: "QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrated by \"aam 0x0,\" which triggers a divide-by-zero error.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2007-1366", url: "https://www.suse.com/security/cve/CVE-2007-1366", }, { category: "external", summary: "SUSE Bug 252519 for CVE-2007-1366", url: "https://bugzilla.suse.com/252519", }, { category: "external", summary: "SUSE Bug 270621 for CVE-2007-1366", url: "https://bugzilla.suse.com/270621", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2007-1366", }, { cve: "CVE-2007-3919", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2007-3919", }, ], notes: [ { category: "general", text: "(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2007-3919", url: "https://www.suse.com/security/cve/CVE-2007-3919", }, { category: "external", summary: "SUSE Bug 334445 for CVE-2007-3919", url: "https://bugzilla.suse.com/334445", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2007-3919", }, { cve: "CVE-2016-10013", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-10013", }, ], notes: [ { category: "general", text: "Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-10013", url: "https://www.suse.com/security/cve/CVE-2016-10013", }, { category: "external", summary: "SUSE Bug 1016340 for CVE-2016-10013", url: "https://bugzilla.suse.com/1016340", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-10013", }, { cve: "CVE-2016-10024", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-10024", }, ], notes: [ { category: "general", text: "Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-10024", url: "https://www.suse.com/security/cve/CVE-2016-10024", }, { category: "external", summary: "SUSE Bug 1014298 for CVE-2016-10024", url: "https://bugzilla.suse.com/1014298", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2016-10024", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-10024", }, { cve: "CVE-2016-10025", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-10025", }, ], notes: [ { category: "general", text: "VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-10025", url: "https://www.suse.com/security/cve/CVE-2016-10025", }, { category: "external", summary: "SUSE Bug 1014300 for CVE-2016-10025", url: "https://bugzilla.suse.com/1014300", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-10025", }, { cve: "CVE-2016-7777", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7777", }, ], notes: [ { category: "general", text: "Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7777", url: "https://www.suse.com/security/cve/CVE-2016-7777", }, { category: "external", summary: "SUSE Bug 1000106 for CVE-2016-7777", url: "https://bugzilla.suse.com/1000106", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7777", }, { cve: "CVE-2016-7908", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7908", }, ], notes: [ { category: "general", text: "The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7908", url: "https://www.suse.com/security/cve/CVE-2016-7908", }, { category: "external", summary: "SUSE Bug 1002550 for CVE-2016-7908", url: "https://bugzilla.suse.com/1002550", }, { category: "external", summary: "SUSE Bug 1003030 for CVE-2016-7908", url: "https://bugzilla.suse.com/1003030", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7908", }, { cve: "CVE-2016-7909", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-7909", }, ], notes: [ { category: "general", text: "The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-7909", url: "https://www.suse.com/security/cve/CVE-2016-7909", }, { category: "external", summary: "SUSE Bug 1002557 for CVE-2016-7909", url: "https://bugzilla.suse.com/1002557", }, { category: "external", summary: "SUSE Bug 1003032 for CVE-2016-7909", url: "https://bugzilla.suse.com/1003032", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-7909", }, { cve: "CVE-2016-8667", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-8667", }, ], notes: [ { category: "general", text: "The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-8667", url: "https://www.suse.com/security/cve/CVE-2016-8667", }, { category: "external", summary: "SUSE Bug 1004702 for CVE-2016-8667", url: "https://bugzilla.suse.com/1004702", }, { category: "external", summary: "SUSE Bug 1005004 for CVE-2016-8667", url: "https://bugzilla.suse.com/1005004", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-8667", }, { cve: "CVE-2016-8669", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-8669", }, ], notes: [ { category: "general", text: "The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-8669", url: "https://www.suse.com/security/cve/CVE-2016-8669", }, { category: "external", summary: "SUSE Bug 1004707 for CVE-2016-8669", url: "https://bugzilla.suse.com/1004707", }, { category: "external", summary: "SUSE Bug 1005005 for CVE-2016-8669", url: "https://bugzilla.suse.com/1005005", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-8669", }, { cve: "CVE-2016-8910", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-8910", }, ], notes: [ { category: "general", text: "The rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-8910", url: "https://www.suse.com/security/cve/CVE-2016-8910", }, { category: "external", summary: "SUSE Bug 1006538 for CVE-2016-8910", url: "https://bugzilla.suse.com/1006538", }, { category: "external", summary: "SUSE Bug 1007157 for CVE-2016-8910", url: "https://bugzilla.suse.com/1007157", }, { category: "external", summary: "SUSE Bug 1024178 for CVE-2016-8910", url: "https://bugzilla.suse.com/1024178", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2016-8910", }, { cve: "CVE-2016-9377", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9377", }, ], notes: [ { category: "general", text: "Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging IDT entry miscalculation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9377", url: "https://www.suse.com/security/cve/CVE-2016-9377", }, { category: "external", summary: "SUSE Bug 1009108 for CVE-2016-9377", url: "https://bugzilla.suse.com/1009108", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-9377", }, { cve: "CVE-2016-9379", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9379", }, ], notes: [ { category: "general", text: "The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9379", url: "https://www.suse.com/security/cve/CVE-2016-9379", }, { category: "external", summary: "SUSE Bug 1009111 for CVE-2016-9379", url: "https://bugzilla.suse.com/1009111", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.9, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-9379", }, { cve: "CVE-2016-9381", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9381", }, ], notes: [ { category: "general", text: "Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data on shared rings, aka a \"double fetch\" vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9381", url: "https://www.suse.com/security/cve/CVE-2016-9381", }, { category: "external", summary: "SUSE Bug 1009109 for CVE-2016-9381", url: "https://bugzilla.suse.com/1009109", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2016-9381", }, { cve: "CVE-2016-9382", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9382", }, ], notes: [ { category: "general", text: "Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9382", url: "https://www.suse.com/security/cve/CVE-2016-9382", }, { category: "external", summary: "SUSE Bug 1009103 for CVE-2016-9382", url: "https://bugzilla.suse.com/1009103", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-9382", }, { cve: "CVE-2016-9383", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9383", }, ], notes: [ { category: "general", text: "Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive information, cause a denial of service (host crash), or execute arbitrary code on the host by leveraging broken emulation of bit test instructions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9383", url: "https://www.suse.com/security/cve/CVE-2016-9383", }, { category: "external", summary: "SUSE Bug 1009107 for CVE-2016-9383", url: "https://bugzilla.suse.com/1009107", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-9383", }, { cve: "CVE-2016-9384", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9384", }, ], notes: [ { category: "general", text: "Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9384", url: "https://www.suse.com/security/cve/CVE-2016-9384", }, { category: "external", summary: "SUSE Bug 1009105 for CVE-2016-9384", url: "https://bugzilla.suse.com/1009105", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2016-9384", }, { cve: "CVE-2016-9385", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9385", }, ], notes: [ { category: "general", text: "The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging lack of canonical address checks.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9385", url: "https://www.suse.com/security/cve/CVE-2016-9385", }, { category: "external", summary: "SUSE Bug 1009104 for CVE-2016-9385", url: "https://bugzilla.suse.com/1009104", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-9385", }, { cve: "CVE-2016-9386", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9386", }, ], notes: [ { category: "general", text: "The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges via vectors involving \"unexpected\" base/limit values.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9386", url: "https://www.suse.com/security/cve/CVE-2016-9386", }, { category: "external", summary: "SUSE Bug 1009100 for CVE-2016-9386", url: "https://bugzilla.suse.com/1009100", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-9386", }, { cve: "CVE-2016-9637", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9637", }, ], notes: [ { category: "general", text: "The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9637", url: "https://www.suse.com/security/cve/CVE-2016-9637", }, { category: "external", summary: "SUSE Bug 1011652 for CVE-2016-9637", url: "https://bugzilla.suse.com/1011652", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2016-9637", }, { cve: "CVE-2016-9921", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9921", }, ], notes: [ { category: "general", text: "Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9921", url: "https://www.suse.com/security/cve/CVE-2016-9921", }, { category: "external", summary: "SUSE Bug 1014702 for CVE-2016-9921", url: "https://bugzilla.suse.com/1014702", }, { category: "external", summary: "SUSE Bug 1015169 for CVE-2016-9921", url: "https://bugzilla.suse.com/1015169", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2016-9921", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2016-9921", }, { cve: "CVE-2016-9932", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2016-9932", }, ], notes: [ { category: "general", text: "CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a \"supposedly-ignored\" operand size prefix.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2016-9932", url: "https://www.suse.com/security/cve/CVE-2016-9932", }, { category: "external", summary: "SUSE Bug 1012651 for CVE-2016-9932", url: "https://bugzilla.suse.com/1012651", }, { category: "external", summary: "SUSE Bug 1016340 for CVE-2016-9932", url: "https://bugzilla.suse.com/1016340", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.3, baseSeverity: "LOW", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2016-9932", }, { cve: "CVE-2017-12135", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12135", }, ], notes: [ { category: "general", text: "Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12135", url: "https://www.suse.com/security/cve/CVE-2017-12135", }, { category: "external", summary: "SUSE Bug 1051787 for CVE-2017-12135", url: "https://bugzilla.suse.com/1051787", }, { category: "external", summary: "SUSE Bug 1169392 for CVE-2017-12135", url: "https://bugzilla.suse.com/1169392", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2017-12135", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.3, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2017-12135", }, { cve: "CVE-2017-12136", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12136", }, ], notes: [ { category: "general", text: "Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12136", url: "https://www.suse.com/security/cve/CVE-2017-12136", }, { category: "external", summary: "SUSE Bug 1051789 for CVE-2017-12136", url: "https://bugzilla.suse.com/1051789", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2017-12136", }, { cve: "CVE-2017-12137", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-12137", }, ], notes: [ { category: "general", text: "arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-12137", url: "https://www.suse.com/security/cve/CVE-2017-12137", }, { category: "external", summary: "SUSE Bug 1051788 for CVE-2017-12137", url: "https://bugzilla.suse.com/1051788", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2017-12137", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.1, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2017-12137", }, { cve: "CVE-2017-2615", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-2615", }, ], notes: [ { category: "general", text: "Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-2615", url: "https://www.suse.com/security/cve/CVE-2017-2615", }, { category: "external", summary: "SUSE Bug 1023004 for CVE-2017-2615", url: "https://bugzilla.suse.com/1023004", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2017-2615", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-2615", }, { cve: "CVE-2017-2620", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-2620", }, ], notes: [ { category: "general", text: "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-2620", url: "https://www.suse.com/security/cve/CVE-2017-2620", }, { category: "external", summary: "SUSE Bug 1024834 for CVE-2017-2620", url: "https://bugzilla.suse.com/1024834", }, { category: "external", summary: "SUSE Bug 1024972 for CVE-2017-2620", url: "https://bugzilla.suse.com/1024972", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2017-2620", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 9.9, baseSeverity: "CRITICAL", vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2017-2620", }, { cve: "CVE-2017-5753", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-5753", }, ], notes: [ { category: "general", text: "Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-5753", url: "https://www.suse.com/security/cve/CVE-2017-5753", }, { category: "external", summary: "SUSE Bug 1068032 for CVE-2017-5753", url: "https://bugzilla.suse.com/1068032", }, { category: "external", summary: "SUSE Bug 1074562 for CVE-2017-5753", url: "https://bugzilla.suse.com/1074562", }, { category: "external", summary: "SUSE Bug 1074578 for CVE-2017-5753", url: "https://bugzilla.suse.com/1074578", }, { category: "external", summary: "SUSE Bug 1074701 for CVE-2017-5753", url: "https://bugzilla.suse.com/1074701", }, { category: "external", summary: "SUSE Bug 1075006 for CVE-2017-5753", url: "https://bugzilla.suse.com/1075006", }, { category: "external", summary: "SUSE Bug 1075419 for CVE-2017-5753", url: "https://bugzilla.suse.com/1075419", }, { category: "external", summary: "SUSE Bug 1075748 for CVE-2017-5753", url: "https://bugzilla.suse.com/1075748", }, { category: "external", summary: "SUSE Bug 1080039 for CVE-2017-5753", url: "https://bugzilla.suse.com/1080039", }, { category: "external", summary: "SUSE Bug 1087084 for CVE-2017-5753", url: "https://bugzilla.suse.com/1087084", }, { category: "external", summary: "SUSE Bug 1087939 for CVE-2017-5753", url: "https://bugzilla.suse.com/1087939", }, { category: "external", summary: "SUSE Bug 1089055 for CVE-2017-5753", url: "https://bugzilla.suse.com/1089055", }, { category: "external", summary: "SUSE Bug 1136865 for CVE-2017-5753", url: "https://bugzilla.suse.com/1136865", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2017-5753", url: "https://bugzilla.suse.com/1178658", }, { category: "external", summary: "SUSE Bug 1201877 for CVE-2017-5753", url: "https://bugzilla.suse.com/1201877", }, { category: "external", summary: "SUSE Bug 1209547 for CVE-2017-5753", url: "https://bugzilla.suse.com/1209547", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2017-5753", }, { cve: "CVE-2017-6505", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-6505", }, ], notes: [ { category: "general", text: "The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors, a different vulnerability than CVE-2017-9330.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-6505", url: "https://www.suse.com/security/cve/CVE-2017-6505", }, { category: "external", summary: "SUSE Bug 1028184 for CVE-2017-6505", url: "https://bugzilla.suse.com/1028184", }, { category: "external", summary: "SUSE Bug 1028235 for CVE-2017-6505", url: "https://bugzilla.suse.com/1028235", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2017-6505", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2017-6505", }, { cve: "CVE-2017-8309", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-8309", }, ], notes: [ { category: "general", text: "Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-8309", url: "https://www.suse.com/security/cve/CVE-2017-8309", }, { category: "external", summary: "SUSE Bug 1037242 for CVE-2017-8309", url: "https://bugzilla.suse.com/1037242", }, { category: "external", summary: "SUSE Bug 1037243 for CVE-2017-8309", url: "https://bugzilla.suse.com/1037243", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2017-8309", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2017-8309", }, { cve: "CVE-2017-9330", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2017-9330", }, ], notes: [ { category: "general", text: "QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2017-9330", url: "https://www.suse.com/security/cve/CVE-2017-9330", }, { category: "external", summary: "SUSE Bug 1042159 for CVE-2017-9330", url: "https://bugzilla.suse.com/1042159", }, { category: "external", summary: "SUSE Bug 1042160 for CVE-2017-9330", url: "https://bugzilla.suse.com/1042160", }, { category: "external", summary: "SUSE Bug 1043157 for CVE-2017-9330", url: "https://bugzilla.suse.com/1043157", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2017-9330", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.8, baseSeverity: "LOW", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2017-9330", }, { cve: "CVE-2018-10471", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-10471", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-10471", url: "https://www.suse.com/security/cve/CVE-2018-10471", }, { category: "external", summary: "SUSE Bug 1089635 for CVE-2018-10471", url: "https://bugzilla.suse.com/1089635", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-10471", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-10471", }, { cve: "CVE-2018-10472", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-10472", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction with specifying the target file as the backing file of a snapshot.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-10472", url: "https://www.suse.com/security/cve/CVE-2018-10472", }, { category: "external", summary: "SUSE Bug 1089152 for CVE-2018-10472", url: "https://bugzilla.suse.com/1089152", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-10472", }, { cve: "CVE-2018-10981", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-10981", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU device model attempts to make invalid transitions between states of a request.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-10981", url: "https://www.suse.com/security/cve/CVE-2018-10981", }, { category: "external", summary: "SUSE Bug 1090823 for CVE-2018-10981", url: "https://bugzilla.suse.com/1090823", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-10981", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-10981", }, { cve: "CVE-2018-10982", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-10982", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor crash) or possibly gain hypervisor privileges by setting up an HPET timer to deliver interrupts in IO-APIC mode, aka vHPET interrupt injection.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-10982", url: "https://www.suse.com/security/cve/CVE-2018-10982", }, { category: "external", summary: "SUSE Bug 1090822 for CVE-2018-10982", url: "https://bugzilla.suse.com/1090822", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-10982", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-10982", }, { cve: "CVE-2018-12126", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-12126", }, ], notes: [ { category: "general", text: "Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-12126", url: "https://www.suse.com/security/cve/CVE-2018-12126", }, { category: "external", summary: "SUSE Bug 1103186 for CVE-2018-12126", url: "https://bugzilla.suse.com/1103186", }, { category: "external", summary: "SUSE Bug 1111331 for CVE-2018-12126", url: "https://bugzilla.suse.com/1111331", }, { category: "external", summary: "SUSE Bug 1132686 for CVE-2018-12126", url: "https://bugzilla.suse.com/1132686", }, { category: "external", summary: "SUSE Bug 1135409 for CVE-2018-12126", url: "https://bugzilla.suse.com/1135409", }, { category: "external", summary: "SUSE Bug 1135524 for CVE-2018-12126", url: "https://bugzilla.suse.com/1135524", }, { category: "external", summary: "SUSE Bug 1137916 for CVE-2018-12126", url: "https://bugzilla.suse.com/1137916", }, { category: "external", summary: "SUSE Bug 1138534 for CVE-2018-12126", url: "https://bugzilla.suse.com/1138534", }, { category: "external", summary: "SUSE Bug 1141977 for CVE-2018-12126", url: "https://bugzilla.suse.com/1141977", }, { category: "external", summary: "SUSE Bug 1149725 for CVE-2018-12126", url: "https://bugzilla.suse.com/1149725", }, { category: "external", summary: "SUSE Bug 1149726 for CVE-2018-12126", url: "https://bugzilla.suse.com/1149726", }, { category: "external", summary: "SUSE Bug 1149729 for CVE-2018-12126", url: "https://bugzilla.suse.com/1149729", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-12126", url: "https://bugzilla.suse.com/1178658", }, { category: "external", summary: "SUSE Bug 1201877 for CVE-2018-12126", url: "https://bugzilla.suse.com/1201877", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.8, baseSeverity: "LOW", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-12126", }, { cve: "CVE-2018-12891", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-12891", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.10.x. Certain PV MMU operations may take a long time to process. For that reason Xen explicitly checks for the need to preempt the current vCPU at certain points. A few rarely taken code paths did bypass such checks. By suitably enforcing the conditions through its own page table contents, a malicious guest may cause such bypasses to be used for an unbounded number of iterations. A malicious or buggy PV guest may cause a Denial of Service (DoS) affecting the entire host. Specifically, it may prevent use of a physical CPU for an indeterminate period of time. All Xen versions from 3.4 onwards are vulnerable. Xen versions 3.3 and earlier are vulnerable to an even wider class of attacks, due to them lacking preemption checks altogether in the affected code paths. Only x86 systems are affected. ARM systems are not affected. Only multi-vCPU x86 PV guests can leverage the vulnerability. x86 HVM or PVH guests as well as x86 single-vCPU PV ones cannot leverage the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-12891", url: "https://www.suse.com/security/cve/CVE-2018-12891", }, { category: "external", summary: "SUSE Bug 1097521 for CVE-2018-12891", url: "https://bugzilla.suse.com/1097521", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-12891", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 2.5, baseSeverity: "LOW", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-12891", }, { cve: "CVE-2018-12892", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-12892", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI disk, due to what was probably an erroneous merge conflict resolution. Malicious guest administrators or (in some situations) users may be able to write to supposedly read-only disk images. Only emulated SCSI disks (specified as \"sd\" in the libxl disk configuration, or an equivalent) are affected. IDE disks (\"hd\") are not affected (because attempts to make them readonly are rejected). Additionally, CDROM devices (that is, devices specified to be presented to the guest as CDROMs, regardless of the nature of the backing storage on the host) are not affected; they are always read only. Only systems using qemu-xen (rather than qemu-xen-traditional) as the device model version are vulnerable. Only systems using libxl or libxl-based toolstacks are vulnerable. (This includes xl, and libvirt with the libxl driver.) The vulnerability is present in Xen versions 4.7 and later. (In earlier versions, provided that the patch for XSA-142 has been applied, attempts to create read only disks are rejected.) If the host and guest together usually support PVHVM, the issue is exploitable only if the malicious guest administrator has control of the guest kernel or guest kernel command line.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-12892", url: "https://www.suse.com/security/cve/CVE-2018-12892", }, { category: "external", summary: "SUSE Bug 1097523 for CVE-2018-12892", url: "https://bugzilla.suse.com/1097523", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-12892", }, { cve: "CVE-2018-12893", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-12893", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen livelocking with debug exceptions. Unfortunately, due to an oversight, at least one of these safety checks can be triggered by a guest. A malicious PV guest can crash Xen, leading to a Denial of Service. All Xen systems which have applied the XSA-260 fix are vulnerable. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only x86 PV guests can exploit the vulnerability. x86 HVM and PVH guests cannot exploit the vulnerability. An attacker needs to be able to control hardware debugging facilities to exploit the vulnerability, but such permissions are typically available to unprivileged users.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-12893", url: "https://www.suse.com/security/cve/CVE-2018-12893", }, { category: "external", summary: "SUSE Bug 1097522 for CVE-2018-12893", url: "https://bugzilla.suse.com/1097522", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-12893", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-12893", }, { cve: "CVE-2018-15468", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-15468", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.11.x. The DEBUGCTL MSR contains several debugging features, some of which virtualise cleanly, but some do not. In particular, Branch Trace Store is not virtualised by the processor, and software has to be careful to configure it suitably not to lock up the core. As a result, it must only be available to fully trusted guests. Unfortunately, in the case that vPMU is disabled, all value checking was skipped, allowing the guest to choose any MSR_DEBUGCTL setting it likes. A malicious or buggy guest administrator (on Intel x86 HVM or PVH) can lock up the entire host, causing a Denial of Service.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-15468", url: "https://www.suse.com/security/cve/CVE-2018-15468", }, { category: "external", summary: "SUSE Bug 1103276 for CVE-2018-15468", url: "https://bugzilla.suse.com/1103276", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-15468", }, { cve: "CVE-2018-15469", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-15469", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an ARM guest can still request v2 grant tables; they will simply not be properly set up, resulting in subsequent grant-related hypercalls hitting BUG() checks. An unprivileged guest can cause a BUG() check in the hypervisor, resulting in a denial-of-service (crash).", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-15469", url: "https://www.suse.com/security/cve/CVE-2018-15469", }, { category: "external", summary: "SUSE Bug 1103275 for CVE-2018-15469", url: "https://bugzilla.suse.com/1103275", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-15469", }, { cve: "CVE-2018-15470", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-15470", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.11.x. The logic in oxenstored for handling writes depended on the order of evaluation of expressions making up a tuple. As indicated in section 7.7.3 \"Operations on data structures\" of the OCaml manual, the order of evaluation of subexpressions is not specified. In practice, different implementations behave differently. Thus, oxenstored may not enforce the configured quota-maxentity. This allows a malicious or buggy guest to write as many xenstore entries as it wishes, causing unbounded memory usage in oxenstored. This can lead to a system-wide DoS.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-15470", url: "https://www.suse.com/security/cve/CVE-2018-15470", }, { category: "external", summary: "SUSE Bug 1103279 for CVE-2018-15470", url: "https://bugzilla.suse.com/1103279", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-15470", }, { cve: "CVE-2018-18883", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-18883", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecified other impact because nested VT-x is not properly restricted.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-18883", url: "https://www.suse.com/security/cve/CVE-2018-18883", }, { category: "external", summary: "SUSE Bug 1114405 for CVE-2018-18883", url: "https://bugzilla.suse.com/1114405", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.8, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-18883", }, { cve: "CVE-2018-19961", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-19961", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-19961", url: "https://www.suse.com/security/cve/CVE-2018-19961", }, { category: "external", summary: "SUSE Bug 1115040 for CVE-2018-19961", url: "https://bugzilla.suse.com/1115040", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-19961", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-19961", }, { cve: "CVE-2018-19963", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-19963", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen 4.11 allowing HVM guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because x86 IOREQ server resource accounting (for external emulators) was mishandled.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-19963", url: "https://www.suse.com/security/cve/CVE-2018-19963", }, { category: "external", summary: "SUSE Bug 1115043 for CVE-2018-19963", url: "https://bugzilla.suse.com/1115043", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-19963", }, { cve: "CVE-2018-19964", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-19964", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen 4.11.x allowing x86 guest OS users to cause a denial of service (host OS hang) because the p2m lock remains unavailable indefinitely in certain error conditions.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-19964", url: "https://www.suse.com/security/cve/CVE-2018-19964", }, { category: "external", summary: "SUSE Bug 1115044 for CVE-2018-19964", url: "https://bugzilla.suse.com/1115044", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-19964", }, { cve: "CVE-2018-19965", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-19965", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-19965", url: "https://www.suse.com/security/cve/CVE-2018-19965", }, { category: "external", summary: "SUSE Bug 1115045 for CVE-2018-19965", url: "https://bugzilla.suse.com/1115045", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-19965", }, { cve: "CVE-2018-19966", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-19966", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-19966", url: "https://www.suse.com/security/cve/CVE-2018-19966", }, { category: "external", summary: "SUSE Bug 1115047 for CVE-2018-19966", url: "https://bugzilla.suse.com/1115047", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-19966", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-19966", }, { cve: "CVE-2018-19967", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-19967", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.11.x on Intel x86 platforms allowing guest OS users to cause a denial of service (host OS hang) because Xen does not work around Intel's mishandling of certain HLE transactions associated with the KACQUIRE instruction prefix.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-19967", url: "https://www.suse.com/security/cve/CVE-2018-19967", }, { category: "external", summary: "SUSE Bug 1114988 for CVE-2018-19967", url: "https://bugzilla.suse.com/1114988", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-19967", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-19967", }, { cve: "CVE-2018-3639", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-3639", }, ], notes: [ { category: "general", text: "Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-3639", url: "https://www.suse.com/security/cve/CVE-2018-3639", }, { category: "external", summary: "SUSE Bug 1074701 for CVE-2018-3639", url: "https://bugzilla.suse.com/1074701", }, { category: "external", summary: "SUSE Bug 1085235 for CVE-2018-3639", url: "https://bugzilla.suse.com/1085235", }, { category: "external", summary: "SUSE Bug 1085308 for CVE-2018-3639", url: "https://bugzilla.suse.com/1085308", }, { category: "external", summary: "SUSE Bug 1087078 for CVE-2018-3639", url: "https://bugzilla.suse.com/1087078", }, { category: "external", summary: "SUSE Bug 1087082 for CVE-2018-3639", url: "https://bugzilla.suse.com/1087082", }, { category: "external", summary: "SUSE Bug 1092631 for CVE-2018-3639", url: "https://bugzilla.suse.com/1092631", }, { category: "external", summary: "SUSE Bug 1092885 for CVE-2018-3639", url: "https://bugzilla.suse.com/1092885", }, { category: "external", summary: "SUSE Bug 1094912 for CVE-2018-3639", url: "https://bugzilla.suse.com/1094912", }, { category: "external", summary: "SUSE Bug 1098813 for CVE-2018-3639", url: "https://bugzilla.suse.com/1098813", }, { category: "external", summary: "SUSE Bug 1100394 for CVE-2018-3639", url: "https://bugzilla.suse.com/1100394", }, { category: "external", summary: "SUSE Bug 1102640 for CVE-2018-3639", url: "https://bugzilla.suse.com/1102640", }, { category: "external", summary: "SUSE Bug 1105412 for CVE-2018-3639", url: "https://bugzilla.suse.com/1105412", }, { category: "external", summary: "SUSE Bug 1111963 for CVE-2018-3639", url: "https://bugzilla.suse.com/1111963", }, { category: "external", summary: "SUSE Bug 1172781 for CVE-2018-3639", url: "https://bugzilla.suse.com/1172781", }, { category: "external", summary: "SUSE Bug 1172782 for CVE-2018-3639", url: "https://bugzilla.suse.com/1172782", }, { category: "external", summary: "SUSE Bug 1172783 for CVE-2018-3639", url: "https://bugzilla.suse.com/1172783", }, { category: "external", summary: "SUSE Bug 1173489 for CVE-2018-3639", url: "https://bugzilla.suse.com/1173489", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-3639", url: "https://bugzilla.suse.com/1178658", }, { category: "external", summary: "SUSE Bug 1201877 for CVE-2018-3639", url: "https://bugzilla.suse.com/1201877", }, { category: "external", summary: "SUSE Bug 1215674 for CVE-2018-3639", url: "https://bugzilla.suse.com/1215674", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-3639", }, { cve: "CVE-2018-3646", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-3646", }, ], notes: [ { category: "general", text: "Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-3646", url: "https://www.suse.com/security/cve/CVE-2018-3646", }, { category: "external", summary: "SUSE Bug 1087078 for CVE-2018-3646", url: "https://bugzilla.suse.com/1087078", }, { category: "external", summary: "SUSE Bug 1087081 for CVE-2018-3646", url: "https://bugzilla.suse.com/1087081", }, { category: "external", summary: "SUSE Bug 1089343 for CVE-2018-3646", url: "https://bugzilla.suse.com/1089343", }, { category: "external", summary: "SUSE Bug 1091107 for CVE-2018-3646", url: "https://bugzilla.suse.com/1091107", }, { category: "external", summary: "SUSE Bug 1099306 for CVE-2018-3646", url: "https://bugzilla.suse.com/1099306", }, { category: "external", summary: "SUSE Bug 1104365 for CVE-2018-3646", url: "https://bugzilla.suse.com/1104365", }, { category: "external", summary: "SUSE Bug 1104894 for CVE-2018-3646", url: "https://bugzilla.suse.com/1104894", }, { category: "external", summary: "SUSE Bug 1106548 for CVE-2018-3646", url: "https://bugzilla.suse.com/1106548", }, { category: "external", summary: "SUSE Bug 1113534 for CVE-2018-3646", url: "https://bugzilla.suse.com/1113534", }, { category: "external", summary: "SUSE Bug 1136865 for CVE-2018-3646", url: "https://bugzilla.suse.com/1136865", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-3646", url: "https://bugzilla.suse.com/1178658", }, { category: "external", summary: "SUSE Bug 1201877 for CVE-2018-3646", url: "https://bugzilla.suse.com/1201877", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-3646", }, { cve: "CVE-2018-3665", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-3665", }, ], notes: [ { category: "general", text: "System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculative execution side channel.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-3665", url: "https://www.suse.com/security/cve/CVE-2018-3665", }, { category: "external", summary: "SUSE Bug 1087078 for CVE-2018-3665", url: "https://bugzilla.suse.com/1087078", }, { category: "external", summary: "SUSE Bug 1087082 for CVE-2018-3665", url: "https://bugzilla.suse.com/1087082", }, { category: "external", summary: "SUSE Bug 1087086 for CVE-2018-3665", url: "https://bugzilla.suse.com/1087086", }, { category: "external", summary: "SUSE Bug 1090338 for CVE-2018-3665", url: "https://bugzilla.suse.com/1090338", }, { category: "external", summary: "SUSE Bug 1095241 for CVE-2018-3665", url: "https://bugzilla.suse.com/1095241", }, { category: "external", summary: "SUSE Bug 1095242 for CVE-2018-3665", url: "https://bugzilla.suse.com/1095242", }, { category: "external", summary: "SUSE Bug 1096740 for CVE-2018-3665", url: "https://bugzilla.suse.com/1096740", }, { category: "external", summary: "SUSE Bug 1100091 for CVE-2018-3665", url: "https://bugzilla.suse.com/1100091", }, { category: "external", summary: "SUSE Bug 1100555 for CVE-2018-3665", url: "https://bugzilla.suse.com/1100555", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-3665", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-3665", }, { cve: "CVE-2018-5244", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-5244", }, ], notes: [ { category: "general", text: "In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-5244", url: "https://www.suse.com/security/cve/CVE-2018-5244", }, { category: "external", summary: "SUSE Bug 1073961 for CVE-2018-5244", url: "https://bugzilla.suse.com/1073961", }, { category: "external", summary: "SUSE Bug 1074966 for CVE-2018-5244", url: "https://bugzilla.suse.com/1074966", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2018-5244", }, { cve: "CVE-2018-7540", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-7540", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (host OS CPU hang) via non-preemptable L3/L4 pagetable freeing.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-7540", url: "https://www.suse.com/security/cve/CVE-2018-7540", }, { category: "external", summary: "SUSE Bug 1080635 for CVE-2018-7540", url: "https://bugzilla.suse.com/1080635", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-7540", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2018-7540", }, { cve: "CVE-2018-7541", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-7541", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.10.x allowing guest OS users to cause a denial of service (hypervisor crash) or gain privileges by triggering a grant-table transition from v2 to v1.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-7541", url: "https://www.suse.com/security/cve/CVE-2018-7541", }, { category: "external", summary: "SUSE Bug 1080662 for CVE-2018-7541", url: "https://bugzilla.suse.com/1080662", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-7541", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.5, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-7541", }, { cve: "CVE-2018-7542", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-7542", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen 4.8.x through 4.10.x allowing x86 PVH guest OS users to cause a denial of service (NULL pointer dereference and hypervisor crash) by leveraging the mishandling of configurations that lack a Local APIC.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-7542", url: "https://www.suse.com/security/cve/CVE-2018-7542", }, { category: "external", summary: "SUSE Bug 1080634 for CVE-2018-7542", url: "https://bugzilla.suse.com/1080634", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-7542", }, { cve: "CVE-2018-8897", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2018-8897", }, ], notes: [ { category: "general", text: "A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and single step trap exceptions until the instruction boundary following the next instruction (SDM Vol. 3A; section 6.8.3). (The inhibited data breakpoints are those on memory accessed by the MOV to SS or POP to SS instruction itself.) Note that debug exceptions are not inhibited by the interrupt enable (EFLAGS.IF) system flag (SDM Vol. 3A; section 2.3). If the instruction following the MOV to SS or POP to SS instruction is an instruction like SYSCALL, SYSENTER, INT 3, etc. that transfers control to the operating system at CPL < 3, the debug exception is delivered after the transfer to CPL < 3 is complete. OS kernels may not expect this order of events and may therefore experience unexpected behavior when it occurs.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2018-8897", url: "https://www.suse.com/security/cve/CVE-2018-8897", }, { category: "external", summary: "SUSE Bug 1087078 for CVE-2018-8897", url: "https://bugzilla.suse.com/1087078", }, { category: "external", summary: "SUSE Bug 1087088 for CVE-2018-8897", url: "https://bugzilla.suse.com/1087088", }, { category: "external", summary: "SUSE Bug 1090368 for CVE-2018-8897", url: "https://bugzilla.suse.com/1090368", }, { category: "external", summary: "SUSE Bug 1090820 for CVE-2018-8897", url: "https://bugzilla.suse.com/1090820", }, { category: "external", summary: "SUSE Bug 1090869 for CVE-2018-8897", url: "https://bugzilla.suse.com/1090869", }, { category: "external", summary: "SUSE Bug 1092497 for CVE-2018-8897", url: "https://bugzilla.suse.com/1092497", }, { category: "external", summary: "SUSE Bug 1093522 for CVE-2018-8897", url: "https://bugzilla.suse.com/1093522", }, { category: "external", summary: "SUSE Bug 1093524 for CVE-2018-8897", url: "https://bugzilla.suse.com/1093524", }, { category: "external", summary: "SUSE Bug 1098813 for CVE-2018-8897", url: "https://bugzilla.suse.com/1098813", }, { category: "external", summary: "SUSE Bug 1100835 for CVE-2018-8897", url: "https://bugzilla.suse.com/1100835", }, { category: "external", summary: "SUSE Bug 1115893 for CVE-2018-8897", url: "https://bugzilla.suse.com/1115893", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2018-8897", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7, baseSeverity: "HIGH", vectorString: "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2018-8897", }, { cve: "CVE-2019-17349", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2019-17349", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a LoadExcl or StoreExcl operation.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2019-17349", url: "https://www.suse.com/security/cve/CVE-2019-17349", }, { category: "external", summary: "SUSE Bug 1138294 for CVE-2019-17349", url: "https://bugzilla.suse.com/1138294", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2019-17349", }, { cve: "CVE-2020-0543", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-0543", }, ], notes: [ { category: "general", text: "Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-0543", url: "https://www.suse.com/security/cve/CVE-2020-0543", }, { category: "external", summary: "SUSE Bug 1154824 for CVE-2020-0543", url: "https://bugzilla.suse.com/1154824", }, { category: "external", summary: "SUSE Bug 1172205 for CVE-2020-0543", url: "https://bugzilla.suse.com/1172205", }, { category: "external", summary: "SUSE Bug 1172206 for CVE-2020-0543", url: "https://bugzilla.suse.com/1172206", }, { category: "external", summary: "SUSE Bug 1172207 for CVE-2020-0543", url: "https://bugzilla.suse.com/1172207", }, { category: "external", summary: "SUSE Bug 1172770 for CVE-2020-0543", url: "https://bugzilla.suse.com/1172770", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-0543", url: "https://bugzilla.suse.com/1178658", }, { category: "external", summary: "SUSE Bug 1201877 for CVE-2020-0543", url: "https://bugzilla.suse.com/1201877", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-0543", }, { cve: "CVE-2020-11739", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11739", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service or possibly gain privileges because of missing memory barriers in read-write unlock paths. The read-write unlock paths don't contain a memory barrier. On Arm, this means a processor is allowed to re-order the memory access with the preceding ones. In other words, the unlock may be seen by another processor before all the memory accesses within the \"critical\" section. As a consequence, it may be possible to have a writer executing a critical section at the same time as readers or another writer. In other words, many of the assumptions (e.g., a variable cannot be modified after a check) in the critical sections are not safe anymore. The read-write locks are used in hypercalls (such as grant-table ones), so a malicious guest could exploit the race. For instance, there is a small window where Xen can leak memory if XENMAPSPACE_grant_table is used concurrently. A malicious guest may be able to leak memory, or cause a hypervisor crash resulting in a Denial of Service (DoS). Information leak and privilege escalation cannot be excluded.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11739", url: "https://www.suse.com/security/cve/CVE-2020-11739", }, { category: "external", summary: "SUSE Bug 1168142 for CVE-2020-11739", url: "https://bugzilla.suse.com/1168142", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-11739", }, { cve: "CVE-2020-11740", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11740", }, ], notes: [ { category: "general", text: "An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. These buffers were not scrubbed.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11740", url: "https://www.suse.com/security/cve/CVE-2020-11740", }, { category: "external", summary: "SUSE Bug 1168140 for CVE-2020-11740", url: "https://bugzilla.suse.com/1168140", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-11740", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-11740", }, { cve: "CVE-2020-11742", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11742", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOP_copy. Grant table operations are expected to return 0 for success, and a negative number for errors. The fix for CVE-2017-12135 introduced a path through grant copy handling where success may be returned to the caller without any action taken. In particular, the status fields of individual operations are left uninitialised, and may result in errant behaviour in the caller of GNTTABOP_copy. A buggy or malicious guest can construct its grant table in such a way that, when a backend domain tries to copy a grant, it hits the incorrect exit path. This returns success to the caller without doing anything, which may cause crashes or other incorrect behaviour.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11742", url: "https://www.suse.com/security/cve/CVE-2020-11742", }, { category: "external", summary: "SUSE Bug 1169392 for CVE-2020-11742", url: "https://bugzilla.suse.com/1169392", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-11742", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-11742", }, { cve: "CVE-2020-11743", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-11743", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOP_map_grant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to return 1 instead of a negative value. The grant table code in Linux treats this condition as success, and proceeds with incorrectly initialised state. A buggy or malicious guest can construct its grant table in such a way that, when a backend domain tries to map a grant, it hits the incorrect error path. This will crash a Linux based dom0 or backend domain.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-11743", url: "https://www.suse.com/security/cve/CVE-2020-11743", }, { category: "external", summary: "SUSE Bug 1168143 for CVE-2020-11743", url: "https://bugzilla.suse.com/1168143", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-11743", }, { cve: "CVE-2020-15563", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-15563", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests' dirty video RAM tracking code allows such guests to make Xen de-reference a pointer guaranteed to point at unmapped space. A malicious or buggy HVM guest may cause the hypervisor to crash, resulting in Denial of Service (DoS) affecting the entire host. Xen versions from 4.8 onwards are affected. Xen versions 4.7 and earlier are not affected. Only x86 systems are affected. Arm systems are not affected. Only x86 HVM guests using shadow paging can leverage the vulnerability. In addition, there needs to be an entity actively monitoring a guest's video frame buffer (typically for display purposes) in order for such a guest to be able to leverage the vulnerability. x86 PV guests, as well as x86 HVM guests using hardware assisted paging (HAP), cannot leverage the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-15563", url: "https://www.suse.com/security/cve/CVE-2020-15563", }, { category: "external", summary: "SUSE Bug 1173377 for CVE-2020-15563", url: "https://bugzilla.suse.com/1173377", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-15563", }, { cve: "CVE-2020-15565", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-15565", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain privileges because of insufficient cache write-back under VT-d. When page tables are shared between IOMMU and CPU, changes to them require flushing of both TLBs. Furthermore, IOMMUs may be non-coherent, and hence prior to flushing IOMMU TLBs, a CPU cache also needs writing back to memory after changes were made. Such writing back of cached data was missing in particular when splitting large page mappings into smaller granularity ones. A malicious guest may be able to retain read/write DMA access to frames returned to Xen's free pool, and later reused for another purpose. Host crashes (leading to a Denial of Service) and privilege escalation cannot be ruled out. Xen versions from at least 3.2 onwards are affected. Only x86 Intel systems are affected. x86 AMD as well as Arm systems are not affected. Only x86 HVM guests using hardware assisted paging (HAP), having a passed through PCI device assigned, and having page table sharing enabled can leverage the vulnerability. Note that page table sharing will be enabled (by default) only if Xen considers IOMMU and CPU large page size support compatible.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-15565", url: "https://www.suse.com/security/cve/CVE-2020-15565", }, { category: "external", summary: "SUSE Bug 1173378 for CVE-2020-15565", url: "https://bugzilla.suse.com/1173378", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.9, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-15565", }, { cve: "CVE-2020-15566", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-15566", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect error handling in event-channel port allocation. The allocation of an event-channel port may fail for multiple reasons: (1) port is already in use, (2) the memory allocation failed, or (3) the port we try to allocate is higher than what is supported by the ABI (e.g., 2L or FIFO) used by the guest or the limit set by an administrator (max_event_channels in xl cfg). Due to the missing error checks, only (1) will be considered an error. All the other cases will provide a valid port and will result in a crash when trying to access the event channel. When the administrator configured a guest to allow more than 1023 event channels, that guest may be able to crash the host. When Xen is out-of-memory, allocation of new event channels will result in crashing the host rather than reporting an error. Xen versions 4.10 and later are affected. All architectures are affected. The default configuration, when guests are created with xl/libxl, is not vulnerable, because of the default event-channel limit.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-15566", url: "https://www.suse.com/security/cve/CVE-2020-15566", }, { category: "external", summary: "SUSE Bug 1173376 for CVE-2020-15566", url: "https://bugzilla.suse.com/1173376", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-15566", }, { cve: "CVE-2020-15567", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-15567", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of service because of non-atomic modification of a live EPT PTE. When mapping guest EPT (nested paging) tables, Xen would in some circumstances use a series of non-atomic bitfield writes. Depending on the compiler version and optimisation flags, Xen might expose a dangerous partially written PTE to the hardware, which an attacker might be able to race to exploit. A guest administrator or perhaps even an unprivileged guest user might be able to cause denial of service, data corruption, or privilege escalation. Only systems using Intel CPUs are vulnerable. Systems using AMD CPUs, and Arm systems, are not vulnerable. Only systems using nested paging (hap, aka nested paging, aka in this case Intel EPT) are vulnerable. Only HVM and PVH guests can exploit the vulnerability. The presence and scope of the vulnerability depends on the precise optimisations performed by the compiler used to build Xen. If the compiler generates (a) a single 64-bit write, or (b) a series of read-modify-write operations in the same order as the source code, the hypervisor is not vulnerable. For example, in one test build using GCC 8.3 with normal settings, the compiler generated multiple (unlocked) read-modify-write operations in source-code order, which did not constitute a vulnerability. We have not been able to survey compilers; consequently we cannot say which compiler(s) might produce vulnerable code (with which code-generation options). The source code clearly violates the C rules, and thus should be considered vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-15567", url: "https://www.suse.com/security/cve/CVE-2020-15567", }, { category: "external", summary: "SUSE Bug 1173380 for CVE-2020-15567", url: "https://bugzilla.suse.com/1173380", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-15567", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-15567", }, { cve: "CVE-2020-25595", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25595", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitized values read back from device hardware registers. While devices strictly compliant with PCI specifications shouldn't be able to affect these registers, experience shows that it's very common for devices to have out-of-spec \"backdoor\" operations that can affect the result of these reads. A not fully trusted guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. Privilege escalation and information leaks cannot be excluded. All versions of Xen supporting PCI passthrough are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only guests with passed through PCI devices may be able to leverage the vulnerability. Only systems passing through devices with out-of-spec (\"backdoor\") functionality can cause issues. Experience shows that such out-of-spec functionality is common; unless you have reason to believe that your device does not have such functionality, it's better to assume that it does.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25595", url: "https://www.suse.com/security/cve/CVE-2020-25595", }, { category: "external", summary: "SUSE Bug 1176344 for CVE-2020-25595", url: "https://bugzilla.suse.com/1176344", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25595", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-25595", }, { cve: "CVE-2020-25596", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25596", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault, and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel, resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel, Centaur, and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25596", url: "https://www.suse.com/security/cve/CVE-2020-25596", }, { category: "external", summary: "SUSE Bug 1176345 for CVE-2020-25596", url: "https://bugzilla.suse.com/1176345", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25596", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-25596", }, { cve: "CVE-2020-25597", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25597", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once-valid event channels may not turn invalid. Logic in the handling of event channel operations in Xen assumes that an event channel, once valid, will not become invalid over the life time of a guest. However, operations like the resetting of all event channels may involve decreasing one of the bounds checked when determining validity. This may lead to bug checks triggering, crashing the host. An unprivileged guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only systems with untrusted guests permitted to create more than the default number of event channels are vulnerable. This number depends on the architecture and type of guest. For 32-bit x86 PV guests, this is 1023; for 64-bit x86 PV guests, and for all ARM guests, this number is 4095. Systems where untrusted guests are limited to fewer than this number are not vulnerable. Note that xl and libxl limit max_event_channels to 1023 by default, so systems using exclusively xl, libvirt+libxl, or their own toolstack based on libxl, and not explicitly setting max_event_channels, are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25597", url: "https://www.suse.com/security/cve/CVE-2020-25597", }, { category: "external", summary: "SUSE Bug 1176346 for CVE-2020-25597", url: "https://bugzilla.suse.com/1176346", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-25597", }, { cve: "CVE-2020-25598", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25598", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource error path. The RCU (Read, Copy, Update) mechanism is a synchronisation primitive. A buggy error path in the XENMEM_acquire_resource exits without releasing an RCU reference, which is conceptually similar to forgetting to unlock a spinlock. A buggy or malicious HVM stubdomain can cause an RCU reference to be leaked. This causes subsequent administration operations, (e.g., CPU offline) to livelock, resulting in a host Denial of Service. The buggy codepath has been present since Xen 4.12. Xen 4.14 and later are vulnerable to the DoS. The side effects are believed to be benign on Xen 4.12 and 4.13, but patches are provided nevertheless. The vulnerability can generally only be exploited by x86 HVM VMs, as these are generally the only type of VM that have a Qemu stubdomain. x86 PV and PVH domains, as well as ARM VMs, typically don't use a stubdomain. Only VMs using HVM stubdomains can exploit the vulnerability. VMs using PV stubdomains, or with emulators running in dom0, cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25598", url: "https://www.suse.com/security/cve/CVE-2020-25598", }, { category: "external", summary: "SUSE Bug 1176341 for CVE-2020-25598", url: "https://bugzilla.suse.com/1176341", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-25598", }, { cve: "CVE-2020-25599", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25599", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of EVTCHNOP_reset (potentially by a guest on itself) or XEN_DOMCTL_soft_reset (by itself covered by XSA-77) can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses or triggering of bug checks. In particular, x86 PV guests may be able to elevate their privilege to that of the host. Host and guest crashes are also possible, leading to a Denial of Service (DoS). Information leaks cannot be ruled out. All Xen versions from 4.5 onwards are vulnerable. Xen versions 4.4 and earlier are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25599", url: "https://www.suse.com/security/cve/CVE-2020-25599", }, { category: "external", summary: "SUSE Bug 1176349 for CVE-2020-25599", url: "https://bugzilla.suse.com/1176349", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-25599", }, { cve: "CVE-2020-25600", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25600", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm (either bitness) ones. 32-bit x86 domains can use only 1023 channels, due to limited space in their shared (between guest and Xen) information structure, whereas all other domains can use up to 4095 in this model. The recording of the respective limit during domain initialization, however, has occurred at a time where domains are still deemed to be 64-bit ones, prior to actually honoring respective domain properties. At the point domains get recognized as 32-bit ones, the limit didn't get updated accordingly. Due to this misbehavior in Xen, 32-bit domains (including Domain 0) servicing other domains may observe event channel allocations to succeed when they should really fail. Subsequent use of such event channels would then possibly lead to corruption of other parts of the shared info structure. An unprivileged guest may cause another domain, in particular Domain 0, to misbehave. This may lead to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only x86 32-bit domains servicing other domains are vulnerable. Arm systems, as well as x86 64-bit domains, are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25600", url: "https://www.suse.com/security/cve/CVE-2020-25600", }, { category: "external", summary: "SUSE Bug 1176348 for CVE-2020-25600", url: "https://bugzilla.suse.com/1176348", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-25600", }, { cve: "CVE-2020-25601", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25601", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() / evtchn_destroy(). In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these (when resetting all event channels or when cleaning up after the guest) may take extended periods of time. So far, there was no arrangement for preemption at suitable intervals, allowing a CPU to spend an almost unbounded amount of time in the processing of these operations. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. All Xen versions are vulnerable in principle. Whether versions 4.3 and older are vulnerable depends on underlying hardware characteristics.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25601", url: "https://www.suse.com/security/cve/CVE-2020-25601", }, { category: "external", summary: "SUSE Bug 1176350 for CVE-2020-25601", url: "https://bugzilla.suse.com/1176350", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-25601", }, { cve: "CVE-2020-25602", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25602", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25602", url: "https://www.suse.com/security/cve/CVE-2020-25602", }, { category: "external", summary: "SUSE Bug 1176339 for CVE-2020-25602", url: "https://bugzilla.suse.com/1176339", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.2, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-25602", }, { cve: "CVE-2020-25603", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25603", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such a sequence is missing an appropriate memory barrier (e.g., smp_*mb()) to prevent both the compiler and CPU from re-ordering access. A malicious guest may be able to cause a hypervisor crash resulting in a Denial of Service (DoS). Information leak and privilege escalation cannot be excluded. Systems running all versions of Xen are affected. Whether a system is vulnerable will depend on the CPU and compiler used to build Xen. For all systems, the presence and the scope of the vulnerability depend on the precise re-ordering performed by the compiler used to build Xen. We have not been able to survey compilers; consequently we cannot say which compiler(s) might produce vulnerable code (with which code generation options). GCC documentation clearly suggests that re-ordering is possible. Arm systems will also be vulnerable if the CPU is able to re-order memory access. Please consult your CPU vendor. x86 systems are only vulnerable if a compiler performs re-ordering.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25603", url: "https://www.suse.com/security/cve/CVE-2020-25603", }, { category: "external", summary: "SUSE Bug 1176347 for CVE-2020-25603", url: "https://bugzilla.suse.com/1176347", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25603", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-25603", }, { cve: "CVE-2020-25604", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25604", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. When migrating timers of x86 HVM guests between its vCPUs, the locking model used allows for a second vCPU of the same guest (also operating on the timers) to release a lock that it didn't acquire. The most likely effect of the issue is a hang or crash of the hypervisor, i.e., a Denial of Service (DoS). All versions of Xen are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only x86 HVM guests can leverage the vulnerability. x86 PV and PVH cannot leverage the vulnerability. Only guests with more than one vCPU can exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25604", url: "https://www.suse.com/security/cve/CVE-2020-25604", }, { category: "external", summary: "SUSE Bug 1176343 for CVE-2020-25604", url: "https://bugzilla.suse.com/1176343", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25604", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-25604", }, { cve: "CVE-2020-27670", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-27670", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-27670", url: "https://www.suse.com/security/cve/CVE-2020-27670", }, { category: "external", summary: "SUSE Bug 1177414 for CVE-2020-27670", url: "https://bugzilla.suse.com/1177414", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-27670", url: "https://bugzilla.suse.com/1178658", }, { category: "external", summary: "SUSE Bug 1183925 for CVE-2020-27670", url: "https://bugzilla.suse.com/1183925", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-27670", }, { cve: "CVE-2020-27671", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-27671", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-27671", url: "https://www.suse.com/security/cve/CVE-2020-27671", }, { category: "external", summary: "SUSE Bug 1177413 for CVE-2020-27671", url: "https://bugzilla.suse.com/1177413", }, { category: "external", summary: "SUSE Bug 1183925 for CVE-2020-27671", url: "https://bugzilla.suse.com/1183925", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-27671", }, { cve: "CVE-2020-27672", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-27672", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-27672", url: "https://www.suse.com/security/cve/CVE-2020-27672", }, { category: "external", summary: "SUSE Bug 1177412 for CVE-2020-27672", url: "https://bugzilla.suse.com/1177412", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-27672", url: "https://bugzilla.suse.com/1178658", }, { category: "external", summary: "SUSE Bug 1183925 for CVE-2020-27672", url: "https://bugzilla.suse.com/1183925", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-27672", }, { cve: "CVE-2020-27674", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-27674", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an INVLPG-like attack technique.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-27674", url: "https://www.suse.com/security/cve/CVE-2020-27674", }, { category: "external", summary: "SUSE Bug 1177409 for CVE-2020-27674", url: "https://bugzilla.suse.com/1177409", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-27674", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.2, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-27674", }, { cve: "CVE-2020-28368", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-28368", }, ], notes: [ { category: "general", text: "Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a \"Platypus\" attack. NOTE: there is only one logically independent fix: to change the access control for each such interface in Xen.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-28368", url: "https://www.suse.com/security/cve/CVE-2020-28368", }, { category: "external", summary: "SUSE Bug 1178591 for CVE-2020-28368", url: "https://bugzilla.suse.com/1178591", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-28368", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-28368", }, { cve: "CVE-2020-29040", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-29040", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-29040", url: "https://www.suse.com/security/cve/CVE-2020-29040", }, { category: "external", summary: "SUSE Bug 1178963 for CVE-2020-29040", url: "https://bugzilla.suse.com/1178963", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.9, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2020-29040", }, { cve: "CVE-2020-29480", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-29480", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. Neither xenstore implementation does any permission checks when reporting a xenstore watch event. A guest administrator can watch the root xenstored node, which will cause notifications for every created, modified, and deleted key. A guest administrator can also use the special watches, which will cause a notification every time a domain is created and destroyed. Data may include: number, type, and domids of other VMs; existence and domids of driver domains; numbers of virtual interfaces, block devices, vcpus; existence of virtual framebuffers and their backend style (e.g., existence of VNC service); Xen VM UUIDs for other domains; timing information about domain creation and device setup; and some hints at the backend provisioning of VMs and their devices. The watch events do not contain values stored in xenstore, only key names. A guest administrator can observe non-sensitive domain and device lifecycle events relating to other guests. This information allows some insight into overall system configuration (including the number and general nature of other guests), and configuration of other guests (including the number and general nature of other guests' devices). This information might be commercially interesting or might make other attacks easier. There is not believed to be exposure of sensitive data. Specifically, there is no exposure of VNC passwords, port numbers, pathnames in host and guest filesystems, cryptographic keys, or within-guest data.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-29480", url: "https://www.suse.com/security/cve/CVE-2020-29480", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-29480", url: "https://bugzilla.suse.com/1178658", }, { category: "external", summary: "SUSE Bug 1179496 for CVE-2020-29480", url: "https://bugzilla.suse.com/1179496", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 3.8, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "low", }, ], title: "CVE-2020-29480", }, { cve: "CVE-2020-29481", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-29481", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid. Unfortunately, existing granted access rights are not removed when a domain is being destroyed. This means that a new domain created with the same domid will inherit the access rights to Xenstore nodes from the previous domain(s) with the same domid. Because all Xenstore entries of a guest below /local/domain/<domid> are being deleted by Xen tools when a guest is destroyed, only Xenstore entries of other guests still running are affected. For example, a newly created guest domain might be able to read sensitive information that had belonged to a previously existing guest domain. Both Xenstore implementations (C and Ocaml) are vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-29481", url: "https://www.suse.com/security/cve/CVE-2020-29481", }, { category: "external", summary: "SUSE Bug 1176349 for CVE-2020-29481", url: "https://bugzilla.suse.com/1176349", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-29481", url: "https://bugzilla.suse.com/1178658", }, { category: "external", summary: "SUSE Bug 1179498 for CVE-2020-29481", url: "https://bugzilla.suse.com/1179498", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-29481", }, { cve: "CVE-2020-29483", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-29483", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. Xenstored and guests communicate via a shared memory page using a specific protocol. When a guest violates this protocol, xenstored will drop the connection to that guest. Unfortunately, this is done by just removing the guest from xenstored's internal management, resulting in the same actions as if the guest had been destroyed, including sending an @releaseDomain event. @releaseDomain events do not say that the guest has been removed. All watchers of this event must look at the states of all guests to find the guest that has been removed. When an @releaseDomain is generated due to a domain xenstored protocol violation, because the guest is still running, the watchers will not react. Later, when the guest is actually destroyed, xenstored will no longer have it stored in its internal data base, so no further @releaseDomain event will be sent. This can lead to a zombie domain; memory mappings of that guest's memory will not be removed, due to the missing event. This zombie domain will be cleaned up only after another domain is destroyed, as that will trigger another @releaseDomain event. If the device model of the guest that violated the Xenstore protocol is running in a stub-domain, a use-after-free case could happen in xenstored, after having removed the guest from its internal data base, possibly resulting in a crash of xenstored. A malicious guest can block resources of the host for a period after its own death. Guests with a stub domain device model can eventually crash xenstored, resulting in a more serious denial of service (the prevention of any further domain management operations). Only the C variant of Xenstore is affected; the Ocaml variant is not affected. Only HVM guests with a stubdom device model can cause a serious DoS.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-29483", url: "https://www.suse.com/security/cve/CVE-2020-29483", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-29483", url: "https://bugzilla.suse.com/1178658", }, { category: "external", summary: "SUSE Bug 1179502 for CVE-2020-29483", url: "https://bugzilla.suse.com/1179502", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-29483", }, { cve: "CVE-2020-29484", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-29484", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. When a Xenstore watch fires, the xenstore client that registered the watch will receive a Xenstore message containing the path of the modified Xenstore entry that triggered the watch, and the tag that was specified when registering the watch. Any communication with xenstored is done via Xenstore messages, consisting of a message header and the payload. The payload length is limited to 4096 bytes. Any request to xenstored resulting in a response with a payload longer than 4096 bytes will result in an error. When registering a watch, the payload length limit applies to the combined length of the watched path and the specified tag. Because watches for a specific path are also triggered for all nodes below that path, the payload of a watch event message can be longer than the payload needed to register the watch. A malicious guest that registers a watch using a very large tag (i.e., with a registration operation payload length close to the 4096 byte limit) can cause the generation of watch events with a payload length larger than 4096 bytes, by writing to Xenstore entries below the watched path. This will result in an error condition in xenstored. This error can result in a NULL pointer dereference, leading to a crash of xenstored. A malicious guest administrator can cause xenstored to crash, leading to a denial of service. Following a xenstored crash, domains may continue to run, but management operations will be impossible. Only C xenstored is affected, oxenstored is not affected.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-29484", url: "https://www.suse.com/security/cve/CVE-2020-29484", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-29484", url: "https://bugzilla.suse.com/1178658", }, { category: "external", summary: "SUSE Bug 1179501 for CVE-2020-29484", url: "https://bugzilla.suse.com/1179501", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-29484", }, { cve: "CVE-2020-29566", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-29566", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. When they require assistance from the device model, x86 HVM guests must be temporarily de-scheduled. The device model will signal Xen when it has completed its operation, via an event channel, so that the relevant vCPU is rescheduled. If the device model were to signal Xen without having actually completed the operation, the de-schedule / re-schedule cycle would repeat. If, in addition, Xen is resignalled very quickly, the re-schedule may occur before the de-schedule was fully complete, triggering a shortcut. This potentially repeating process uses ordinary recursive function calls, and thus could result in a stack overflow. A malicious or buggy stubdomain serving a HVM guest can cause Xen to crash, resulting in a Denial of Service (DoS) to the entire host. Only x86 systems are affected. Arm systems are not affected. Only x86 stubdomains serving HVM guests can exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-29566", url: "https://www.suse.com/security/cve/CVE-2020-29566", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-29566", url: "https://bugzilla.suse.com/1178658", }, { category: "external", summary: "SUSE Bug 1179506 for CVE-2020-29566", url: "https://bugzilla.suse.com/1179506", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-29566", }, { cve: "CVE-2020-29567", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-29567", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checked, the checking CPU may send an interrupt to itself, in the expectation that this IRQ will be delivered only after the condition preventing the cleanup has cleared. For two specific IRQ vectors, this expectation was violated, resulting in a continuous stream of self-interrupts, which renders the CPU effectively unusable. A domain with a passed through PCI device can cause lockup of a physical CPU, resulting in a Denial of Service (DoS) to the entire host. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only guests with physical PCI devices passed through to them can exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-29567", url: "https://www.suse.com/security/cve/CVE-2020-29567", }, { category: "external", summary: "SUSE Bug 1179513 for CVE-2020-29567", url: "https://bugzilla.suse.com/1179513", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-29567", }, { cve: "CVE-2020-29570", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-29570", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping maintained by Xen and that of pointers into the control block is reversed. The consumer assumes, seeing the former initialized, that the latter are also ready for use. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-29570", url: "https://www.suse.com/security/cve/CVE-2020-29570", }, { category: "external", summary: "SUSE Bug 1179514 for CVE-2020-29570", url: "https://bugzilla.suse.com/1179514", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-29570", }, { cve: "CVE-2020-29571", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-29571", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. A bounds check common to most operation time functions specific to FIFO event channels depends on the CPU observing consistent state. While the producer side uses appropriately ordered writes, the consumer side isn't protected against re-ordered reads, and may hence end up de-referencing a NULL pointer. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. Only Arm systems may be vulnerable. Whether a system is vulnerable depends on the specific CPU. x86 systems are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-29571", url: "https://www.suse.com/security/cve/CVE-2020-29571", }, { category: "external", summary: "SUSE Bug 1179516 for CVE-2020-29571", url: "https://bugzilla.suse.com/1179516", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2020-29571", }, { cve: "CVE-2021-28687", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-28687", }, ], notes: [ { category: "general", text: "HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of them. When the \"soft reset\" feature was implemented, the libxl__domain_suspend_state structure didn't require any initialization or disposal. At some point later, an initialization function was introduced for the structure; but the \"soft reset\" path wasn't refactored to call the initialization function. When a guest nwo initiates a \"soft reboot\", uninitialized data structure leads to an assert() when later code finds the structure in an unexpected state. The effect of this is to crash the process monitoring the guest. How this affects the system depends on the structure of the toolstack. For xl, this will have no security-relevant effect: every VM has its own independent monitoring process, which contains no state. The domain in question will hang in a crashed state, but can be destroyed by `xl destroy` just like any other non-cooperating domain. For daemon-based toolstacks linked against libxl, such as libvirt, this will crash the toolstack, losing the state of any in-progress operations (localized DoS), and preventing further administrator operations unless the daemon is configured to restart automatically (system-wide DoS). If crashes \"leak\" resources, then repeated crashes could use up resources, also causing a system-wide DoS.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-28687", url: "https://www.suse.com/security/cve/CVE-2021-28687", }, { category: "external", summary: "SUSE Bug 1183072 for CVE-2021-28687", url: "https://bugzilla.suse.com/1183072", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xen-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-devel-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-doc-html-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-32bit-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-libs-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-domU-4.15.1_01-1.2.x86_64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.aarch64", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.ppc64le", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.s390x", "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.15.1_01-1.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "moderate", }, ], title: "CVE-2021-28687", }, ], }
suse-su-2020:2790-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for xen", title: "Title of the patch", }, { category: "description", text: "This update for xen fixes the following issues:\n\n- CVE-2020-25602: Fixed an issue where there was a crash when\n handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333)\n- CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path\n (bsc#1176341,XSA-334)\n- CVE-2020-25604: Fixed a race condition when migrating timers between x86 \n HVM vCPU-s (bsc#1176343,XSA-336)\n- CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)\n- CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)\n- CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)\n- CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)\n- CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)\n- CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)\n- CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)\t \n\n- Various bug fixes (bsc#1027519)\n", title: "Description of the patch", }, { category: "details", text: "SUSE-2020-2790,SUSE-SLE-Module-Basesystem-15-SP1-2020-2790,SUSE-SLE-Module-Server-Applications-15-SP1-2020-2790", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2790-1.json", }, { category: "self", summary: "URL for SUSE-SU-2020:2790-1", url: "https://www.suse.com/support/update/announcement/2020/suse-su-20202790-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2020:2790-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2020-September/007503.html", }, { category: "self", summary: "SUSE Bug 1027519", url: "https://bugzilla.suse.com/1027519", }, { category: "self", summary: "SUSE Bug 1176339", url: "https://bugzilla.suse.com/1176339", }, { category: "self", summary: "SUSE Bug 1176341", url: "https://bugzilla.suse.com/1176341", }, { category: "self", summary: "SUSE Bug 1176343", url: "https://bugzilla.suse.com/1176343", }, { category: "self", summary: "SUSE Bug 1176344", url: "https://bugzilla.suse.com/1176344", }, { category: "self", summary: "SUSE Bug 1176345", url: "https://bugzilla.suse.com/1176345", }, { category: "self", summary: "SUSE Bug 1176346", url: "https://bugzilla.suse.com/1176346", }, { category: "self", summary: "SUSE Bug 1176347", url: "https://bugzilla.suse.com/1176347", }, { category: "self", summary: "SUSE Bug 1176348", url: "https://bugzilla.suse.com/1176348", }, { category: "self", summary: "SUSE Bug 1176349", url: "https://bugzilla.suse.com/1176349", }, { category: "self", summary: "SUSE Bug 1176350", url: "https://bugzilla.suse.com/1176350", }, { category: "self", summary: "SUSE CVE CVE-2020-25595 page", url: "https://www.suse.com/security/cve/CVE-2020-25595/", }, { category: "self", summary: "SUSE CVE CVE-2020-25596 page", url: "https://www.suse.com/security/cve/CVE-2020-25596/", }, { category: "self", summary: "SUSE CVE CVE-2020-25597 page", url: "https://www.suse.com/security/cve/CVE-2020-25597/", }, { category: "self", summary: "SUSE CVE CVE-2020-25598 page", url: "https://www.suse.com/security/cve/CVE-2020-25598/", }, { category: "self", summary: "SUSE CVE CVE-2020-25599 page", url: "https://www.suse.com/security/cve/CVE-2020-25599/", }, { category: "self", summary: "SUSE CVE CVE-2020-25600 page", url: "https://www.suse.com/security/cve/CVE-2020-25600/", }, { category: "self", summary: "SUSE CVE CVE-2020-25601 page", url: "https://www.suse.com/security/cve/CVE-2020-25601/", }, { category: "self", summary: "SUSE CVE CVE-2020-25602 page", url: "https://www.suse.com/security/cve/CVE-2020-25602/", }, { category: "self", summary: "SUSE CVE CVE-2020-25603 page", url: "https://www.suse.com/security/cve/CVE-2020-25603/", }, { category: "self", summary: "SUSE CVE CVE-2020-25604 page", url: "https://www.suse.com/security/cve/CVE-2020-25604/", }, ], title: "Security update for xen", tracking: { current_release_date: "2020-09-29T12:13:34Z", generator: { date: "2020-09-29T12:13:34Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2020:2790-1", initial_release_date: "2020-09-29T12:13:34Z", revision_history: [ { date: "2020-09-29T12:13:34Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "xen-4.12.3_08-3.28.1.aarch64", product: { name: "xen-4.12.3_08-3.28.1.aarch64", product_id: "xen-4.12.3_08-3.28.1.aarch64", }, }, { category: "product_version", name: "xen-devel-4.12.3_08-3.28.1.aarch64", product: { name: "xen-devel-4.12.3_08-3.28.1.aarch64", product_id: "xen-devel-4.12.3_08-3.28.1.aarch64", }, }, { category: "product_version", name: "xen-doc-html-4.12.3_08-3.28.1.aarch64", product: { name: "xen-doc-html-4.12.3_08-3.28.1.aarch64", product_id: "xen-doc-html-4.12.3_08-3.28.1.aarch64", }, }, { category: "product_version", name: "xen-libs-4.12.3_08-3.28.1.aarch64", product: { name: "xen-libs-4.12.3_08-3.28.1.aarch64", product_id: "xen-libs-4.12.3_08-3.28.1.aarch64", }, }, { category: "product_version", name: "xen-tools-4.12.3_08-3.28.1.aarch64", product: { name: "xen-tools-4.12.3_08-3.28.1.aarch64", product_id: "xen-tools-4.12.3_08-3.28.1.aarch64", }, }, { category: "product_version", name: "xen-tools-domU-4.12.3_08-3.28.1.aarch64", product: { name: "xen-tools-domU-4.12.3_08-3.28.1.aarch64", product_id: "xen-tools-domU-4.12.3_08-3.28.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "xen-libs-64bit-4.12.3_08-3.28.1.aarch64_ilp32", product: { name: "xen-libs-64bit-4.12.3_08-3.28.1.aarch64_ilp32", product_id: "xen-libs-64bit-4.12.3_08-3.28.1.aarch64_ilp32", }, }, ], category: "architecture", name: "aarch64_ilp32", }, { branches: [ { category: "product_version", name: "xen-devel-4.12.3_08-3.28.1.i586", product: { name: "xen-devel-4.12.3_08-3.28.1.i586", product_id: "xen-devel-4.12.3_08-3.28.1.i586", }, }, { category: "product_version", name: "xen-libs-4.12.3_08-3.28.1.i586", product: { name: "xen-libs-4.12.3_08-3.28.1.i586", product_id: "xen-libs-4.12.3_08-3.28.1.i586", }, }, { category: "product_version", name: "xen-tools-domU-4.12.3_08-3.28.1.i586", product: { name: "xen-tools-domU-4.12.3_08-3.28.1.i586", product_id: "xen-tools-domU-4.12.3_08-3.28.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "xen-4.12.3_08-3.28.1.x86_64", product: { name: "xen-4.12.3_08-3.28.1.x86_64", product_id: "xen-4.12.3_08-3.28.1.x86_64", }, }, { category: "product_version", name: "xen-devel-4.12.3_08-3.28.1.x86_64", product: { name: "xen-devel-4.12.3_08-3.28.1.x86_64", product_id: "xen-devel-4.12.3_08-3.28.1.x86_64", }, }, { category: "product_version", name: "xen-doc-html-4.12.3_08-3.28.1.x86_64", product: { name: "xen-doc-html-4.12.3_08-3.28.1.x86_64", product_id: "xen-doc-html-4.12.3_08-3.28.1.x86_64", }, }, { category: "product_version", name: "xen-libs-4.12.3_08-3.28.1.x86_64", product: { name: "xen-libs-4.12.3_08-3.28.1.x86_64", product_id: "xen-libs-4.12.3_08-3.28.1.x86_64", }, }, { category: "product_version", name: "xen-libs-32bit-4.12.3_08-3.28.1.x86_64", product: { name: "xen-libs-32bit-4.12.3_08-3.28.1.x86_64", product_id: "xen-libs-32bit-4.12.3_08-3.28.1.x86_64", }, }, { category: "product_version", name: "xen-tools-4.12.3_08-3.28.1.x86_64", product: { name: "xen-tools-4.12.3_08-3.28.1.x86_64", product_id: "xen-tools-4.12.3_08-3.28.1.x86_64", }, }, { category: "product_version", name: "xen-tools-domU-4.12.3_08-3.28.1.x86_64", product: { name: "xen-tools-domU-4.12.3_08-3.28.1.x86_64", product_id: "xen-tools-domU-4.12.3_08-3.28.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Module for Basesystem 15 SP1", product: { name: "SUSE Linux Enterprise Module for Basesystem 15 SP1", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1", product_identification_helper: { cpe: "cpe:/o:suse:sle-module-basesystem:15:sp1", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Module for Server Applications 15 SP1", product: { name: "SUSE Linux Enterprise Module for Server Applications 15 SP1", product_id: "SUSE Linux Enterprise Module for Server Applications 15 SP1", product_identification_helper: { cpe: "cpe:/o:suse:sle-module-server-applications:15:sp1", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "xen-libs-4.12.3_08-3.28.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", }, product_reference: "xen-libs-4.12.3_08-3.28.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.12.3_08-3.28.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP1", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", }, product_reference: "xen-tools-domU-4.12.3_08-3.28.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP1", }, { category: "default_component_of", full_product_name: { name: "xen-4.12.3_08-3.28.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP1", product_id: "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", }, product_reference: "xen-4.12.3_08-3.28.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Server Applications 15 SP1", }, { category: "default_component_of", full_product_name: { name: "xen-devel-4.12.3_08-3.28.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP1", product_id: "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", }, product_reference: "xen-devel-4.12.3_08-3.28.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Server Applications 15 SP1", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.12.3_08-3.28.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP1", product_id: "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", }, product_reference: "xen-tools-4.12.3_08-3.28.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Server Applications 15 SP1", }, ], }, vulnerabilities: [ { cve: "CVE-2020-25595", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25595", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitized values read back from device hardware registers. While devices strictly compliant with PCI specifications shouldn't be able to affect these registers, experience shows that it's very common for devices to have out-of-spec \"backdoor\" operations that can affect the result of these reads. A not fully trusted guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. Privilege escalation and information leaks cannot be excluded. All versions of Xen supporting PCI passthrough are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only guests with passed through PCI devices may be able to leverage the vulnerability. Only systems passing through devices with out-of-spec (\"backdoor\") functionality can cause issues. Experience shows that such out-of-spec functionality is common; unless you have reason to believe that your device does not have such functionality, it's better to assume that it does.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25595", url: "https://www.suse.com/security/cve/CVE-2020-25595", }, { category: "external", summary: "SUSE Bug 1176344 for CVE-2020-25595", url: "https://bugzilla.suse.com/1176344", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25595", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:34Z", details: "important", }, ], title: "CVE-2020-25595", }, { cve: "CVE-2020-25596", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25596", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault, and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel, resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel, Centaur, and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25596", url: "https://www.suse.com/security/cve/CVE-2020-25596", }, { category: "external", summary: "SUSE Bug 1176345 for CVE-2020-25596", url: "https://bugzilla.suse.com/1176345", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25596", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:34Z", details: "moderate", }, ], title: "CVE-2020-25596", }, { cve: "CVE-2020-25597", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25597", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once-valid event channels may not turn invalid. Logic in the handling of event channel operations in Xen assumes that an event channel, once valid, will not become invalid over the life time of a guest. However, operations like the resetting of all event channels may involve decreasing one of the bounds checked when determining validity. This may lead to bug checks triggering, crashing the host. An unprivileged guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only systems with untrusted guests permitted to create more than the default number of event channels are vulnerable. This number depends on the architecture and type of guest. For 32-bit x86 PV guests, this is 1023; for 64-bit x86 PV guests, and for all ARM guests, this number is 4095. Systems where untrusted guests are limited to fewer than this number are not vulnerable. Note that xl and libxl limit max_event_channels to 1023 by default, so systems using exclusively xl, libvirt+libxl, or their own toolstack based on libxl, and not explicitly setting max_event_channels, are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25597", url: "https://www.suse.com/security/cve/CVE-2020-25597", }, { category: "external", summary: "SUSE Bug 1176346 for CVE-2020-25597", url: "https://bugzilla.suse.com/1176346", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:34Z", details: "moderate", }, ], title: "CVE-2020-25597", }, { cve: "CVE-2020-25598", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25598", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource error path. The RCU (Read, Copy, Update) mechanism is a synchronisation primitive. A buggy error path in the XENMEM_acquire_resource exits without releasing an RCU reference, which is conceptually similar to forgetting to unlock a spinlock. A buggy or malicious HVM stubdomain can cause an RCU reference to be leaked. This causes subsequent administration operations, (e.g., CPU offline) to livelock, resulting in a host Denial of Service. The buggy codepath has been present since Xen 4.12. Xen 4.14 and later are vulnerable to the DoS. The side effects are believed to be benign on Xen 4.12 and 4.13, but patches are provided nevertheless. The vulnerability can generally only be exploited by x86 HVM VMs, as these are generally the only type of VM that have a Qemu stubdomain. x86 PV and PVH domains, as well as ARM VMs, typically don't use a stubdomain. Only VMs using HVM stubdomains can exploit the vulnerability. VMs using PV stubdomains, or with emulators running in dom0, cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25598", url: "https://www.suse.com/security/cve/CVE-2020-25598", }, { category: "external", summary: "SUSE Bug 1176341 for CVE-2020-25598", url: "https://bugzilla.suse.com/1176341", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:34Z", details: "moderate", }, ], title: "CVE-2020-25598", }, { cve: "CVE-2020-25599", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25599", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of EVTCHNOP_reset (potentially by a guest on itself) or XEN_DOMCTL_soft_reset (by itself covered by XSA-77) can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses or triggering of bug checks. In particular, x86 PV guests may be able to elevate their privilege to that of the host. Host and guest crashes are also possible, leading to a Denial of Service (DoS). Information leaks cannot be ruled out. All Xen versions from 4.5 onwards are vulnerable. Xen versions 4.4 and earlier are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25599", url: "https://www.suse.com/security/cve/CVE-2020-25599", }, { category: "external", summary: "SUSE Bug 1176349 for CVE-2020-25599", url: "https://bugzilla.suse.com/1176349", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:34Z", details: "important", }, ], title: "CVE-2020-25599", }, { cve: "CVE-2020-25600", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25600", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm (either bitness) ones. 32-bit x86 domains can use only 1023 channels, due to limited space in their shared (between guest and Xen) information structure, whereas all other domains can use up to 4095 in this model. The recording of the respective limit during domain initialization, however, has occurred at a time where domains are still deemed to be 64-bit ones, prior to actually honoring respective domain properties. At the point domains get recognized as 32-bit ones, the limit didn't get updated accordingly. Due to this misbehavior in Xen, 32-bit domains (including Domain 0) servicing other domains may observe event channel allocations to succeed when they should really fail. Subsequent use of such event channels would then possibly lead to corruption of other parts of the shared info structure. An unprivileged guest may cause another domain, in particular Domain 0, to misbehave. This may lead to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only x86 32-bit domains servicing other domains are vulnerable. Arm systems, as well as x86 64-bit domains, are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25600", url: "https://www.suse.com/security/cve/CVE-2020-25600", }, { category: "external", summary: "SUSE Bug 1176348 for CVE-2020-25600", url: "https://bugzilla.suse.com/1176348", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:34Z", details: "important", }, ], title: "CVE-2020-25600", }, { cve: "CVE-2020-25601", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25601", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() / evtchn_destroy(). In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these (when resetting all event channels or when cleaning up after the guest) may take extended periods of time. So far, there was no arrangement for preemption at suitable intervals, allowing a CPU to spend an almost unbounded amount of time in the processing of these operations. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. All Xen versions are vulnerable in principle. Whether versions 4.3 and older are vulnerable depends on underlying hardware characteristics.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25601", url: "https://www.suse.com/security/cve/CVE-2020-25601", }, { category: "external", summary: "SUSE Bug 1176350 for CVE-2020-25601", url: "https://bugzilla.suse.com/1176350", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:34Z", details: "moderate", }, ], title: "CVE-2020-25601", }, { cve: "CVE-2020-25602", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25602", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25602", url: "https://www.suse.com/security/cve/CVE-2020-25602", }, { category: "external", summary: "SUSE Bug 1176339 for CVE-2020-25602", url: "https://bugzilla.suse.com/1176339", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.2, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:34Z", details: "moderate", }, ], title: "CVE-2020-25602", }, { cve: "CVE-2020-25603", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25603", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such a sequence is missing an appropriate memory barrier (e.g., smp_*mb()) to prevent both the compiler and CPU from re-ordering access. A malicious guest may be able to cause a hypervisor crash resulting in a Denial of Service (DoS). Information leak and privilege escalation cannot be excluded. Systems running all versions of Xen are affected. Whether a system is vulnerable will depend on the CPU and compiler used to build Xen. For all systems, the presence and the scope of the vulnerability depend on the precise re-ordering performed by the compiler used to build Xen. We have not been able to survey compilers; consequently we cannot say which compiler(s) might produce vulnerable code (with which code generation options). GCC documentation clearly suggests that re-ordering is possible. Arm systems will also be vulnerable if the CPU is able to re-order memory access. Please consult your CPU vendor. x86 systems are only vulnerable if a compiler performs re-ordering.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25603", url: "https://www.suse.com/security/cve/CVE-2020-25603", }, { category: "external", summary: "SUSE Bug 1176347 for CVE-2020-25603", url: "https://bugzilla.suse.com/1176347", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25603", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:34Z", details: "important", }, ], title: "CVE-2020-25603", }, { cve: "CVE-2020-25604", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25604", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. When migrating timers of x86 HVM guests between its vCPUs, the locking model used allows for a second vCPU of the same guest (also operating on the timers) to release a lock that it didn't acquire. The most likely effect of the issue is a hang or crash of the hypervisor, i.e., a Denial of Service (DoS). All versions of Xen are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only x86 HVM guests can leverage the vulnerability. x86 PV and PVH cannot leverage the vulnerability. Only guests with more than one vCPU can exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25604", url: "https://www.suse.com/security/cve/CVE-2020-25604", }, { category: "external", summary: "SUSE Bug 1176343 for CVE-2020-25604", url: "https://bugzilla.suse.com/1176343", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25604", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-libs-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP1:xen-tools-domU-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-devel-4.12.3_08-3.28.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP1:xen-tools-4.12.3_08-3.28.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:34Z", details: "moderate", }, ], title: "CVE-2020-25604", }, ], }
suse-su-2020:2788-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for xen", title: "Title of the patch", }, { category: "description", text: "This update for xen fixes the following issues:\n\n- CVE-2020-25602: Fixed an issue where there was a crash when\n handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333)\n- CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path\n (bsc#1176341,XSA-334)\n- CVE-2020-25604: Fixed a race condition when migrating timers between x86 \n HVM vCPU-s (bsc#1176343,XSA-336)\n- CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)\n- CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)\n- CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)\n- CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)\n- CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)\n- CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)\n- CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)\t \n- CVE-2020-14364: Fixed an out-of-bounds read/write access while processing usb packets (bsc#1175534).\n- Various bug fixes (bsc#1027519)\n", title: "Description of the patch", }, { category: "details", text: "SUSE-2020-2788,SUSE-SLE-SDK-12-SP5-2020-2788,SUSE-SLE-SERVER-12-SP5-2020-2788", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2788-1.json", }, { category: "self", summary: "URL for SUSE-SU-2020:2788-1", url: "https://www.suse.com/support/update/announcement/2020/suse-su-20202788-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2020:2788-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2020-September/007504.html", }, { category: "self", summary: "SUSE Bug 1027519", url: "https://bugzilla.suse.com/1027519", }, { category: "self", summary: "SUSE Bug 1175534", url: "https://bugzilla.suse.com/1175534", }, { category: "self", summary: "SUSE Bug 1176339", url: "https://bugzilla.suse.com/1176339", }, { category: "self", summary: "SUSE Bug 1176341", url: "https://bugzilla.suse.com/1176341", }, { category: "self", summary: "SUSE Bug 1176343", url: "https://bugzilla.suse.com/1176343", }, { category: "self", summary: "SUSE Bug 1176344", url: "https://bugzilla.suse.com/1176344", }, { category: "self", summary: "SUSE Bug 1176345", url: "https://bugzilla.suse.com/1176345", }, { category: "self", summary: "SUSE Bug 1176346", url: "https://bugzilla.suse.com/1176346", }, { category: "self", summary: "SUSE Bug 1176347", url: "https://bugzilla.suse.com/1176347", }, { category: "self", summary: "SUSE Bug 1176348", url: "https://bugzilla.suse.com/1176348", }, { category: "self", summary: "SUSE Bug 1176349", url: "https://bugzilla.suse.com/1176349", }, { category: "self", summary: "SUSE Bug 1176350", url: "https://bugzilla.suse.com/1176350", }, { category: "self", summary: "SUSE CVE CVE-2020-14364 page", url: "https://www.suse.com/security/cve/CVE-2020-14364/", }, { category: "self", summary: "SUSE CVE CVE-2020-25595 page", url: "https://www.suse.com/security/cve/CVE-2020-25595/", }, { category: "self", summary: "SUSE CVE CVE-2020-25596 page", url: "https://www.suse.com/security/cve/CVE-2020-25596/", }, { category: "self", summary: "SUSE CVE CVE-2020-25597 page", url: "https://www.suse.com/security/cve/CVE-2020-25597/", }, { category: "self", summary: "SUSE CVE CVE-2020-25598 page", url: "https://www.suse.com/security/cve/CVE-2020-25598/", }, { category: "self", summary: "SUSE CVE CVE-2020-25599 page", url: "https://www.suse.com/security/cve/CVE-2020-25599/", }, { category: "self", summary: "SUSE CVE CVE-2020-25600 page", url: "https://www.suse.com/security/cve/CVE-2020-25600/", }, { category: "self", summary: "SUSE CVE CVE-2020-25601 page", url: "https://www.suse.com/security/cve/CVE-2020-25601/", }, { category: "self", summary: "SUSE CVE CVE-2020-25602 page", url: "https://www.suse.com/security/cve/CVE-2020-25602/", }, { category: "self", summary: "SUSE CVE CVE-2020-25603 page", url: "https://www.suse.com/security/cve/CVE-2020-25603/", }, { category: "self", summary: "SUSE CVE CVE-2020-25604 page", url: "https://www.suse.com/security/cve/CVE-2020-25604/", }, ], title: "Security update for xen", tracking: { current_release_date: "2020-09-29T12:13:04Z", generator: { date: "2020-09-29T12:13:04Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2020:2788-1", initial_release_date: "2020-09-29T12:13:04Z", revision_history: [ { date: "2020-09-29T12:13:04Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "xen-4.12.3_08-3.24.1.aarch64", product: { name: "xen-4.12.3_08-3.24.1.aarch64", product_id: "xen-4.12.3_08-3.24.1.aarch64", }, }, { category: "product_version", name: "xen-devel-4.12.3_08-3.24.1.aarch64", product: { name: "xen-devel-4.12.3_08-3.24.1.aarch64", product_id: "xen-devel-4.12.3_08-3.24.1.aarch64", }, }, { category: "product_version", name: "xen-doc-html-4.12.3_08-3.24.1.aarch64", product: { name: "xen-doc-html-4.12.3_08-3.24.1.aarch64", product_id: "xen-doc-html-4.12.3_08-3.24.1.aarch64", }, }, { category: "product_version", name: "xen-libs-4.12.3_08-3.24.1.aarch64", product: { name: "xen-libs-4.12.3_08-3.24.1.aarch64", product_id: "xen-libs-4.12.3_08-3.24.1.aarch64", }, }, { category: "product_version", name: "xen-tools-4.12.3_08-3.24.1.aarch64", product: { name: "xen-tools-4.12.3_08-3.24.1.aarch64", product_id: "xen-tools-4.12.3_08-3.24.1.aarch64", }, }, { category: "product_version", name: "xen-tools-domU-4.12.3_08-3.24.1.aarch64", product: { name: "xen-tools-domU-4.12.3_08-3.24.1.aarch64", product_id: "xen-tools-domU-4.12.3_08-3.24.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "xen-libs-64bit-4.12.3_08-3.24.1.aarch64_ilp32", product: { name: "xen-libs-64bit-4.12.3_08-3.24.1.aarch64_ilp32", product_id: "xen-libs-64bit-4.12.3_08-3.24.1.aarch64_ilp32", }, }, ], category: "architecture", name: "aarch64_ilp32", }, { branches: [ { category: "product_version", name: "xen-devel-4.12.3_08-3.24.1.i586", product: { name: "xen-devel-4.12.3_08-3.24.1.i586", product_id: "xen-devel-4.12.3_08-3.24.1.i586", }, }, { category: "product_version", name: "xen-libs-4.12.3_08-3.24.1.i586", product: { name: "xen-libs-4.12.3_08-3.24.1.i586", product_id: "xen-libs-4.12.3_08-3.24.1.i586", }, }, { category: "product_version", name: "xen-tools-domU-4.12.3_08-3.24.1.i586", product: { name: "xen-tools-domU-4.12.3_08-3.24.1.i586", product_id: "xen-tools-domU-4.12.3_08-3.24.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "xen-4.12.3_08-3.24.1.x86_64", product: { name: "xen-4.12.3_08-3.24.1.x86_64", product_id: "xen-4.12.3_08-3.24.1.x86_64", }, }, { category: "product_version", name: "xen-devel-4.12.3_08-3.24.1.x86_64", product: { name: "xen-devel-4.12.3_08-3.24.1.x86_64", product_id: "xen-devel-4.12.3_08-3.24.1.x86_64", }, }, { category: "product_version", name: "xen-doc-html-4.12.3_08-3.24.1.x86_64", product: { name: "xen-doc-html-4.12.3_08-3.24.1.x86_64", product_id: "xen-doc-html-4.12.3_08-3.24.1.x86_64", }, }, { category: "product_version", name: "xen-libs-4.12.3_08-3.24.1.x86_64", product: { name: "xen-libs-4.12.3_08-3.24.1.x86_64", product_id: "xen-libs-4.12.3_08-3.24.1.x86_64", }, }, { category: "product_version", name: "xen-libs-32bit-4.12.3_08-3.24.1.x86_64", product: { name: "xen-libs-32bit-4.12.3_08-3.24.1.x86_64", product_id: "xen-libs-32bit-4.12.3_08-3.24.1.x86_64", }, }, { category: "product_version", name: "xen-tools-4.12.3_08-3.24.1.x86_64", product: { name: "xen-tools-4.12.3_08-3.24.1.x86_64", product_id: "xen-tools-4.12.3_08-3.24.1.x86_64", }, }, { category: "product_version", name: "xen-tools-domU-4.12.3_08-3.24.1.x86_64", product: { name: "xen-tools-domU-4.12.3_08-3.24.1.x86_64", product_id: "xen-tools-domU-4.12.3_08-3.24.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Software Development Kit 12 SP5", product: { name: "SUSE Linux Enterprise Software Development Kit 12 SP5", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5", product_identification_helper: { cpe: "cpe:/o:suse:sle-sdk:12:sp5", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP5", product: { name: "SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5", product_identification_helper: { cpe: "cpe:/o:suse:sles:12:sp5", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", product: { name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:12:sp5", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "xen-devel-4.12.3_08-3.24.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", }, product_reference: "xen-devel-4.12.3_08-3.24.1.aarch64", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-devel-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5", product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-devel-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-doc-html-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-doc-html-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-libs-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-libs-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-libs-32bit-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-libs-32bit-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-tools-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5", product_id: "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-tools-domU-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-doc-html-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-doc-html-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-libs-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-libs-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-libs-32bit-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-libs-32bit-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-tools-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.12.3_08-3.24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", }, product_reference: "xen-tools-domU-4.12.3_08-3.24.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5", }, ], }, vulnerabilities: [ { cve: "CVE-2020-14364", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-14364", }, ], notes: [ { category: "general", text: "An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-14364", url: "https://www.suse.com/security/cve/CVE-2020-14364", }, { category: "external", summary: "SUSE Bug 1175441 for CVE-2020-14364", url: "https://bugzilla.suse.com/1175441", }, { category: "external", summary: "SUSE Bug 1175534 for CVE-2020-14364", url: "https://bugzilla.suse.com/1175534", }, { category: "external", summary: "SUSE Bug 1176494 for CVE-2020-14364", url: "https://bugzilla.suse.com/1176494", }, { category: "external", summary: "SUSE Bug 1177130 for CVE-2020-14364", url: "https://bugzilla.suse.com/1177130", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:04Z", details: "moderate", }, ], title: "CVE-2020-14364", }, { cve: "CVE-2020-25595", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25595", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitized values read back from device hardware registers. While devices strictly compliant with PCI specifications shouldn't be able to affect these registers, experience shows that it's very common for devices to have out-of-spec \"backdoor\" operations that can affect the result of these reads. A not fully trusted guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. Privilege escalation and information leaks cannot be excluded. All versions of Xen supporting PCI passthrough are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only guests with passed through PCI devices may be able to leverage the vulnerability. Only systems passing through devices with out-of-spec (\"backdoor\") functionality can cause issues. Experience shows that such out-of-spec functionality is common; unless you have reason to believe that your device does not have such functionality, it's better to assume that it does.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25595", url: "https://www.suse.com/security/cve/CVE-2020-25595", }, { category: "external", summary: "SUSE Bug 1176344 for CVE-2020-25595", url: "https://bugzilla.suse.com/1176344", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25595", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:04Z", details: "important", }, ], title: "CVE-2020-25595", }, { cve: "CVE-2020-25596", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25596", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault, and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel, resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel, Centaur, and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25596", url: "https://www.suse.com/security/cve/CVE-2020-25596", }, { category: "external", summary: "SUSE Bug 1176345 for CVE-2020-25596", url: "https://bugzilla.suse.com/1176345", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25596", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:04Z", details: "moderate", }, ], title: "CVE-2020-25596", }, { cve: "CVE-2020-25597", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25597", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once-valid event channels may not turn invalid. Logic in the handling of event channel operations in Xen assumes that an event channel, once valid, will not become invalid over the life time of a guest. However, operations like the resetting of all event channels may involve decreasing one of the bounds checked when determining validity. This may lead to bug checks triggering, crashing the host. An unprivileged guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only systems with untrusted guests permitted to create more than the default number of event channels are vulnerable. This number depends on the architecture and type of guest. For 32-bit x86 PV guests, this is 1023; for 64-bit x86 PV guests, and for all ARM guests, this number is 4095. Systems where untrusted guests are limited to fewer than this number are not vulnerable. Note that xl and libxl limit max_event_channels to 1023 by default, so systems using exclusively xl, libvirt+libxl, or their own toolstack based on libxl, and not explicitly setting max_event_channels, are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25597", url: "https://www.suse.com/security/cve/CVE-2020-25597", }, { category: "external", summary: "SUSE Bug 1176346 for CVE-2020-25597", url: "https://bugzilla.suse.com/1176346", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:04Z", details: "moderate", }, ], title: "CVE-2020-25597", }, { cve: "CVE-2020-25598", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25598", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource error path. The RCU (Read, Copy, Update) mechanism is a synchronisation primitive. A buggy error path in the XENMEM_acquire_resource exits without releasing an RCU reference, which is conceptually similar to forgetting to unlock a spinlock. A buggy or malicious HVM stubdomain can cause an RCU reference to be leaked. This causes subsequent administration operations, (e.g., CPU offline) to livelock, resulting in a host Denial of Service. The buggy codepath has been present since Xen 4.12. Xen 4.14 and later are vulnerable to the DoS. The side effects are believed to be benign on Xen 4.12 and 4.13, but patches are provided nevertheless. The vulnerability can generally only be exploited by x86 HVM VMs, as these are generally the only type of VM that have a Qemu stubdomain. x86 PV and PVH domains, as well as ARM VMs, typically don't use a stubdomain. Only VMs using HVM stubdomains can exploit the vulnerability. VMs using PV stubdomains, or with emulators running in dom0, cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25598", url: "https://www.suse.com/security/cve/CVE-2020-25598", }, { category: "external", summary: "SUSE Bug 1176341 for CVE-2020-25598", url: "https://bugzilla.suse.com/1176341", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:04Z", details: "moderate", }, ], title: "CVE-2020-25598", }, { cve: "CVE-2020-25599", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25599", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of EVTCHNOP_reset (potentially by a guest on itself) or XEN_DOMCTL_soft_reset (by itself covered by XSA-77) can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses or triggering of bug checks. In particular, x86 PV guests may be able to elevate their privilege to that of the host. Host and guest crashes are also possible, leading to a Denial of Service (DoS). Information leaks cannot be ruled out. All Xen versions from 4.5 onwards are vulnerable. Xen versions 4.4 and earlier are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25599", url: "https://www.suse.com/security/cve/CVE-2020-25599", }, { category: "external", summary: "SUSE Bug 1176349 for CVE-2020-25599", url: "https://bugzilla.suse.com/1176349", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:04Z", details: "important", }, ], title: "CVE-2020-25599", }, { cve: "CVE-2020-25600", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25600", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm (either bitness) ones. 32-bit x86 domains can use only 1023 channels, due to limited space in their shared (between guest and Xen) information structure, whereas all other domains can use up to 4095 in this model. The recording of the respective limit during domain initialization, however, has occurred at a time where domains are still deemed to be 64-bit ones, prior to actually honoring respective domain properties. At the point domains get recognized as 32-bit ones, the limit didn't get updated accordingly. Due to this misbehavior in Xen, 32-bit domains (including Domain 0) servicing other domains may observe event channel allocations to succeed when they should really fail. Subsequent use of such event channels would then possibly lead to corruption of other parts of the shared info structure. An unprivileged guest may cause another domain, in particular Domain 0, to misbehave. This may lead to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only x86 32-bit domains servicing other domains are vulnerable. Arm systems, as well as x86 64-bit domains, are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25600", url: "https://www.suse.com/security/cve/CVE-2020-25600", }, { category: "external", summary: "SUSE Bug 1176348 for CVE-2020-25600", url: "https://bugzilla.suse.com/1176348", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:04Z", details: "important", }, ], title: "CVE-2020-25600", }, { cve: "CVE-2020-25601", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25601", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() / evtchn_destroy(). In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these (when resetting all event channels or when cleaning up after the guest) may take extended periods of time. So far, there was no arrangement for preemption at suitable intervals, allowing a CPU to spend an almost unbounded amount of time in the processing of these operations. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. All Xen versions are vulnerable in principle. Whether versions 4.3 and older are vulnerable depends on underlying hardware characteristics.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25601", url: "https://www.suse.com/security/cve/CVE-2020-25601", }, { category: "external", summary: "SUSE Bug 1176350 for CVE-2020-25601", url: "https://bugzilla.suse.com/1176350", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:04Z", details: "moderate", }, ], title: "CVE-2020-25601", }, { cve: "CVE-2020-25602", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25602", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25602", url: "https://www.suse.com/security/cve/CVE-2020-25602", }, { category: "external", summary: "SUSE Bug 1176339 for CVE-2020-25602", url: "https://bugzilla.suse.com/1176339", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.2, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:04Z", details: "moderate", }, ], title: "CVE-2020-25602", }, { cve: "CVE-2020-25603", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25603", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such a sequence is missing an appropriate memory barrier (e.g., smp_*mb()) to prevent both the compiler and CPU from re-ordering access. A malicious guest may be able to cause a hypervisor crash resulting in a Denial of Service (DoS). Information leak and privilege escalation cannot be excluded. Systems running all versions of Xen are affected. Whether a system is vulnerable will depend on the CPU and compiler used to build Xen. For all systems, the presence and the scope of the vulnerability depend on the precise re-ordering performed by the compiler used to build Xen. We have not been able to survey compilers; consequently we cannot say which compiler(s) might produce vulnerable code (with which code generation options). GCC documentation clearly suggests that re-ordering is possible. Arm systems will also be vulnerable if the CPU is able to re-order memory access. Please consult your CPU vendor. x86 systems are only vulnerable if a compiler performs re-ordering.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25603", url: "https://www.suse.com/security/cve/CVE-2020-25603", }, { category: "external", summary: "SUSE Bug 1176347 for CVE-2020-25603", url: "https://bugzilla.suse.com/1176347", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25603", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:04Z", details: "important", }, ], title: "CVE-2020-25603", }, { cve: "CVE-2020-25604", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25604", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. When migrating timers of x86 HVM guests between its vCPUs, the locking model used allows for a second vCPU of the same guest (also operating on the timers) to release a lock that it didn't acquire. The most likely effect of the issue is a hang or crash of the hypervisor, i.e., a Denial of Service (DoS). All versions of Xen are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only x86 HVM guests can leverage the vulnerability. x86 PV and PVH cannot leverage the vulnerability. Only guests with more than one vCPU can exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25604", url: "https://www.suse.com/security/cve/CVE-2020-25604", }, { category: "external", summary: "SUSE Bug 1176343 for CVE-2020-25604", url: "https://bugzilla.suse.com/1176343", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25604", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.3_08-3.24.1.x86_64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.aarch64", "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.3_08-3.24.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:04Z", details: "moderate", }, ], title: "CVE-2020-25604", }, ], }
suse-su-2020:2786-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for xen", title: "Title of the patch", }, { category: "description", text: "This update for xen fixes the following issues:\n\n- CVE-2020-25602: Fixed an issue where there was a crash when\n handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333)\n- CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path\n (bsc#1176341,XSA-334)\n- CVE-2020-25604: Fixed a race condition when migrating timers between x86 \n HVM vCPU-s (bsc#1176343,XSA-336)\n- CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)\n- CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)\n- CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)\n- CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)\n- CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)\n- CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)\n- CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)\t \n- CVE-2020-14364: Fixed an out-of-bounds read/write access while processing usb packets (bsc#1175534).\n- Various bug fixes (bsc#1027519)\t \n", title: "Description of the patch", }, { category: "details", text: "SUSE-2020-2786,SUSE-OpenStack-Cloud-9-2020-2786,SUSE-OpenStack-Cloud-Crowbar-9-2020-2786,SUSE-SLE-SAP-12-SP4-2020-2786,SUSE-SLE-SERVER-12-SP4-LTSS-2020-2786", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2786-1.json", }, { category: "self", summary: "URL for SUSE-SU-2020:2786-1", url: "https://www.suse.com/support/update/announcement/2020/suse-su-20202786-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2020:2786-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2020-September/007498.html", }, { category: "self", summary: "SUSE Bug 1027519", url: "https://bugzilla.suse.com/1027519", }, { category: "self", summary: "SUSE Bug 1175534", url: "https://bugzilla.suse.com/1175534", }, { category: "self", summary: "SUSE Bug 1176339", url: "https://bugzilla.suse.com/1176339", }, { category: "self", summary: "SUSE Bug 1176343", url: "https://bugzilla.suse.com/1176343", }, { category: "self", summary: "SUSE Bug 1176344", url: "https://bugzilla.suse.com/1176344", }, { category: "self", summary: "SUSE Bug 1176345", url: "https://bugzilla.suse.com/1176345", }, { category: "self", summary: "SUSE Bug 1176346", url: "https://bugzilla.suse.com/1176346", }, { category: "self", summary: "SUSE Bug 1176347", url: "https://bugzilla.suse.com/1176347", }, { category: "self", summary: "SUSE Bug 1176348", url: "https://bugzilla.suse.com/1176348", }, { category: "self", summary: "SUSE Bug 1176349", url: "https://bugzilla.suse.com/1176349", }, { category: "self", summary: "SUSE Bug 1176350", url: "https://bugzilla.suse.com/1176350", }, { category: "self", summary: "SUSE CVE CVE-2020-14364 page", url: "https://www.suse.com/security/cve/CVE-2020-14364/", }, { category: "self", summary: "SUSE CVE CVE-2020-25595 page", url: "https://www.suse.com/security/cve/CVE-2020-25595/", }, { category: "self", summary: "SUSE CVE CVE-2020-25596 page", url: "https://www.suse.com/security/cve/CVE-2020-25596/", }, { category: "self", summary: "SUSE CVE CVE-2020-25597 page", url: "https://www.suse.com/security/cve/CVE-2020-25597/", }, { category: "self", summary: "SUSE CVE CVE-2020-25599 page", url: "https://www.suse.com/security/cve/CVE-2020-25599/", }, { category: "self", summary: "SUSE CVE CVE-2020-25600 page", url: "https://www.suse.com/security/cve/CVE-2020-25600/", }, { category: "self", summary: "SUSE CVE CVE-2020-25601 page", url: "https://www.suse.com/security/cve/CVE-2020-25601/", }, { category: "self", summary: "SUSE CVE CVE-2020-25602 page", url: "https://www.suse.com/security/cve/CVE-2020-25602/", }, { category: "self", summary: "SUSE CVE CVE-2020-25603 page", url: "https://www.suse.com/security/cve/CVE-2020-25603/", }, { category: "self", summary: "SUSE CVE CVE-2020-25604 page", url: "https://www.suse.com/security/cve/CVE-2020-25604/", }, ], title: "Security update for xen", tracking: { current_release_date: "2020-09-29T12:12:25Z", generator: { date: "2020-09-29T12:12:25Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2020:2786-1", initial_release_date: "2020-09-29T12:12:25Z", revision_history: [ { date: "2020-09-29T12:12:25Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "xen-4.11.4_08-2.36.1.aarch64", product: { name: "xen-4.11.4_08-2.36.1.aarch64", product_id: "xen-4.11.4_08-2.36.1.aarch64", }, }, { category: "product_version", name: "xen-devel-4.11.4_08-2.36.1.aarch64", product: { name: "xen-devel-4.11.4_08-2.36.1.aarch64", product_id: "xen-devel-4.11.4_08-2.36.1.aarch64", }, }, { category: "product_version", name: "xen-doc-html-4.11.4_08-2.36.1.aarch64", product: { name: "xen-doc-html-4.11.4_08-2.36.1.aarch64", product_id: "xen-doc-html-4.11.4_08-2.36.1.aarch64", }, }, { category: "product_version", name: "xen-libs-4.11.4_08-2.36.1.aarch64", product: { name: "xen-libs-4.11.4_08-2.36.1.aarch64", product_id: "xen-libs-4.11.4_08-2.36.1.aarch64", }, }, { category: "product_version", name: "xen-tools-4.11.4_08-2.36.1.aarch64", product: { name: "xen-tools-4.11.4_08-2.36.1.aarch64", product_id: "xen-tools-4.11.4_08-2.36.1.aarch64", }, }, { category: "product_version", name: "xen-tools-domU-4.11.4_08-2.36.1.aarch64", product: { name: "xen-tools-domU-4.11.4_08-2.36.1.aarch64", product_id: "xen-tools-domU-4.11.4_08-2.36.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "xen-libs-64bit-4.11.4_08-2.36.1.aarch64_ilp32", product: { name: "xen-libs-64bit-4.11.4_08-2.36.1.aarch64_ilp32", product_id: "xen-libs-64bit-4.11.4_08-2.36.1.aarch64_ilp32", }, }, ], category: "architecture", name: "aarch64_ilp32", }, { branches: [ { category: "product_version", name: "xen-devel-4.11.4_08-2.36.1.i586", product: { name: "xen-devel-4.11.4_08-2.36.1.i586", product_id: "xen-devel-4.11.4_08-2.36.1.i586", }, }, { category: "product_version", name: "xen-libs-4.11.4_08-2.36.1.i586", product: { name: "xen-libs-4.11.4_08-2.36.1.i586", product_id: "xen-libs-4.11.4_08-2.36.1.i586", }, }, { category: "product_version", name: "xen-tools-domU-4.11.4_08-2.36.1.i586", product: { name: "xen-tools-domU-4.11.4_08-2.36.1.i586", product_id: "xen-tools-domU-4.11.4_08-2.36.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "xen-4.11.4_08-2.36.1.x86_64", product: { name: "xen-4.11.4_08-2.36.1.x86_64", product_id: "xen-4.11.4_08-2.36.1.x86_64", }, }, { category: "product_version", name: "xen-devel-4.11.4_08-2.36.1.x86_64", product: { name: "xen-devel-4.11.4_08-2.36.1.x86_64", product_id: "xen-devel-4.11.4_08-2.36.1.x86_64", }, }, { category: "product_version", name: "xen-doc-html-4.11.4_08-2.36.1.x86_64", product: { name: "xen-doc-html-4.11.4_08-2.36.1.x86_64", product_id: "xen-doc-html-4.11.4_08-2.36.1.x86_64", }, }, { category: "product_version", name: "xen-libs-4.11.4_08-2.36.1.x86_64", product: { name: "xen-libs-4.11.4_08-2.36.1.x86_64", product_id: "xen-libs-4.11.4_08-2.36.1.x86_64", }, }, { category: "product_version", name: "xen-libs-32bit-4.11.4_08-2.36.1.x86_64", product: { name: "xen-libs-32bit-4.11.4_08-2.36.1.x86_64", product_id: "xen-libs-32bit-4.11.4_08-2.36.1.x86_64", }, }, { category: "product_version", name: "xen-tools-4.11.4_08-2.36.1.x86_64", product: { name: "xen-tools-4.11.4_08-2.36.1.x86_64", product_id: "xen-tools-4.11.4_08-2.36.1.x86_64", }, }, { category: "product_version", name: "xen-tools-domU-4.11.4_08-2.36.1.x86_64", product: { name: "xen-tools-domU-4.11.4_08-2.36.1.x86_64", product_id: "xen-tools-domU-4.11.4_08-2.36.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE OpenStack Cloud 9", product: { name: "SUSE OpenStack Cloud 9", product_id: "SUSE OpenStack Cloud 9", product_identification_helper: { cpe: "cpe:/o:suse:suse-openstack-cloud:9", }, }, }, { category: "product_name", name: "SUSE OpenStack Cloud Crowbar 9", product: { name: "SUSE OpenStack Cloud Crowbar 9", product_id: "SUSE OpenStack Cloud Crowbar 9", product_identification_helper: { cpe: "cpe:/o:suse:suse-openstack-cloud-crowbar:9", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", product: { name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", product_identification_helper: { cpe: "cpe:/o:suse:sles_sap:12:sp4", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Server 12 SP4-LTSS", product: { name: "SUSE Linux Enterprise Server 12 SP4-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS", product_identification_helper: { cpe: "cpe:/o:suse:sles-ltss:12:sp4", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "xen-4.11.4_08-2.36.1.x86_64 as component of SUSE OpenStack Cloud 9", product_id: "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud 9", }, { category: "default_component_of", full_product_name: { name: "xen-doc-html-4.11.4_08-2.36.1.x86_64 as component of SUSE OpenStack Cloud 9", product_id: "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-doc-html-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud 9", }, { category: "default_component_of", full_product_name: { name: "xen-libs-4.11.4_08-2.36.1.x86_64 as component of SUSE OpenStack Cloud 9", product_id: "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-libs-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud 9", }, { category: "default_component_of", full_product_name: { name: "xen-libs-32bit-4.11.4_08-2.36.1.x86_64 as component of SUSE OpenStack Cloud 9", product_id: "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-libs-32bit-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud 9", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.11.4_08-2.36.1.x86_64 as component of SUSE OpenStack Cloud 9", product_id: "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-tools-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud 9", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.11.4_08-2.36.1.x86_64 as component of SUSE OpenStack Cloud 9", product_id: "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-tools-domU-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud 9", }, { category: "default_component_of", full_product_name: { name: "xen-4.11.4_08-2.36.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", product_id: "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9", }, { category: "default_component_of", full_product_name: { name: "xen-doc-html-4.11.4_08-2.36.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", product_id: "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-doc-html-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9", }, { category: "default_component_of", full_product_name: { name: "xen-libs-4.11.4_08-2.36.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", product_id: "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-libs-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9", }, { category: "default_component_of", full_product_name: { name: "xen-libs-32bit-4.11.4_08-2.36.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", product_id: "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-libs-32bit-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.11.4_08-2.36.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", product_id: "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-tools-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.11.4_08-2.36.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 9", product_id: "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-tools-domU-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 9", }, { category: "default_component_of", full_product_name: { name: "xen-4.11.4_08-2.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", }, { category: "default_component_of", full_product_name: { name: "xen-doc-html-4.11.4_08-2.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-doc-html-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", }, { category: "default_component_of", full_product_name: { name: "xen-libs-4.11.4_08-2.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-libs-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", }, { category: "default_component_of", full_product_name: { name: "xen-libs-32bit-4.11.4_08-2.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-libs-32bit-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.11.4_08-2.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-tools-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.11.4_08-2.36.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4", product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-tools-domU-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4", }, { category: "default_component_of", full_product_name: { name: "xen-4.11.4_08-2.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS", }, { category: "default_component_of", full_product_name: { name: "xen-doc-html-4.11.4_08-2.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-doc-html-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS", }, { category: "default_component_of", full_product_name: { name: "xen-libs-4.11.4_08-2.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-libs-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS", }, { category: "default_component_of", full_product_name: { name: "xen-libs-32bit-4.11.4_08-2.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-libs-32bit-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.11.4_08-2.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-tools-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.11.4_08-2.36.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4-LTSS", product_id: "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", }, product_reference: "xen-tools-domU-4.11.4_08-2.36.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4-LTSS", }, ], }, vulnerabilities: [ { cve: "CVE-2020-14364", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-14364", }, ], notes: [ { category: "general", text: "An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-14364", url: "https://www.suse.com/security/cve/CVE-2020-14364", }, { category: "external", summary: "SUSE Bug 1175441 for CVE-2020-14364", url: "https://bugzilla.suse.com/1175441", }, { category: "external", summary: "SUSE Bug 1175534 for CVE-2020-14364", url: "https://bugzilla.suse.com/1175534", }, { category: "external", summary: "SUSE Bug 1176494 for CVE-2020-14364", url: "https://bugzilla.suse.com/1176494", }, { category: "external", summary: "SUSE Bug 1177130 for CVE-2020-14364", url: "https://bugzilla.suse.com/1177130", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:12:25Z", details: "moderate", }, ], title: "CVE-2020-14364", }, { cve: "CVE-2020-25595", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25595", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitized values read back from device hardware registers. While devices strictly compliant with PCI specifications shouldn't be able to affect these registers, experience shows that it's very common for devices to have out-of-spec \"backdoor\" operations that can affect the result of these reads. A not fully trusted guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. Privilege escalation and information leaks cannot be excluded. All versions of Xen supporting PCI passthrough are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only guests with passed through PCI devices may be able to leverage the vulnerability. Only systems passing through devices with out-of-spec (\"backdoor\") functionality can cause issues. Experience shows that such out-of-spec functionality is common; unless you have reason to believe that your device does not have such functionality, it's better to assume that it does.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25595", url: "https://www.suse.com/security/cve/CVE-2020-25595", }, { category: "external", summary: "SUSE Bug 1176344 for CVE-2020-25595", url: "https://bugzilla.suse.com/1176344", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25595", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:12:25Z", details: "important", }, ], title: "CVE-2020-25595", }, { cve: "CVE-2020-25596", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25596", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault, and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel, resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel, Centaur, and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25596", url: "https://www.suse.com/security/cve/CVE-2020-25596", }, { category: "external", summary: "SUSE Bug 1176345 for CVE-2020-25596", url: "https://bugzilla.suse.com/1176345", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25596", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:12:25Z", details: "moderate", }, ], title: "CVE-2020-25596", }, { cve: "CVE-2020-25597", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25597", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once-valid event channels may not turn invalid. Logic in the handling of event channel operations in Xen assumes that an event channel, once valid, will not become invalid over the life time of a guest. However, operations like the resetting of all event channels may involve decreasing one of the bounds checked when determining validity. This may lead to bug checks triggering, crashing the host. An unprivileged guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only systems with untrusted guests permitted to create more than the default number of event channels are vulnerable. This number depends on the architecture and type of guest. For 32-bit x86 PV guests, this is 1023; for 64-bit x86 PV guests, and for all ARM guests, this number is 4095. Systems where untrusted guests are limited to fewer than this number are not vulnerable. Note that xl and libxl limit max_event_channels to 1023 by default, so systems using exclusively xl, libvirt+libxl, or their own toolstack based on libxl, and not explicitly setting max_event_channels, are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25597", url: "https://www.suse.com/security/cve/CVE-2020-25597", }, { category: "external", summary: "SUSE Bug 1176346 for CVE-2020-25597", url: "https://bugzilla.suse.com/1176346", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:12:25Z", details: "moderate", }, ], title: "CVE-2020-25597", }, { cve: "CVE-2020-25599", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25599", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of EVTCHNOP_reset (potentially by a guest on itself) or XEN_DOMCTL_soft_reset (by itself covered by XSA-77) can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses or triggering of bug checks. In particular, x86 PV guests may be able to elevate their privilege to that of the host. Host and guest crashes are also possible, leading to a Denial of Service (DoS). Information leaks cannot be ruled out. All Xen versions from 4.5 onwards are vulnerable. Xen versions 4.4 and earlier are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25599", url: "https://www.suse.com/security/cve/CVE-2020-25599", }, { category: "external", summary: "SUSE Bug 1176349 for CVE-2020-25599", url: "https://bugzilla.suse.com/1176349", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:12:25Z", details: "important", }, ], title: "CVE-2020-25599", }, { cve: "CVE-2020-25600", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25600", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm (either bitness) ones. 32-bit x86 domains can use only 1023 channels, due to limited space in their shared (between guest and Xen) information structure, whereas all other domains can use up to 4095 in this model. The recording of the respective limit during domain initialization, however, has occurred at a time where domains are still deemed to be 64-bit ones, prior to actually honoring respective domain properties. At the point domains get recognized as 32-bit ones, the limit didn't get updated accordingly. Due to this misbehavior in Xen, 32-bit domains (including Domain 0) servicing other domains may observe event channel allocations to succeed when they should really fail. Subsequent use of such event channels would then possibly lead to corruption of other parts of the shared info structure. An unprivileged guest may cause another domain, in particular Domain 0, to misbehave. This may lead to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only x86 32-bit domains servicing other domains are vulnerable. Arm systems, as well as x86 64-bit domains, are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25600", url: "https://www.suse.com/security/cve/CVE-2020-25600", }, { category: "external", summary: "SUSE Bug 1176348 for CVE-2020-25600", url: "https://bugzilla.suse.com/1176348", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:12:25Z", details: "important", }, ], title: "CVE-2020-25600", }, { cve: "CVE-2020-25601", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25601", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() / evtchn_destroy(). In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these (when resetting all event channels or when cleaning up after the guest) may take extended periods of time. So far, there was no arrangement for preemption at suitable intervals, allowing a CPU to spend an almost unbounded amount of time in the processing of these operations. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. All Xen versions are vulnerable in principle. Whether versions 4.3 and older are vulnerable depends on underlying hardware characteristics.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25601", url: "https://www.suse.com/security/cve/CVE-2020-25601", }, { category: "external", summary: "SUSE Bug 1176350 for CVE-2020-25601", url: "https://bugzilla.suse.com/1176350", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:12:25Z", details: "moderate", }, ], title: "CVE-2020-25601", }, { cve: "CVE-2020-25602", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25602", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25602", url: "https://www.suse.com/security/cve/CVE-2020-25602", }, { category: "external", summary: "SUSE Bug 1176339 for CVE-2020-25602", url: "https://bugzilla.suse.com/1176339", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.2, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:12:25Z", details: "moderate", }, ], title: "CVE-2020-25602", }, { cve: "CVE-2020-25603", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25603", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such a sequence is missing an appropriate memory barrier (e.g., smp_*mb()) to prevent both the compiler and CPU from re-ordering access. A malicious guest may be able to cause a hypervisor crash resulting in a Denial of Service (DoS). Information leak and privilege escalation cannot be excluded. Systems running all versions of Xen are affected. Whether a system is vulnerable will depend on the CPU and compiler used to build Xen. For all systems, the presence and the scope of the vulnerability depend on the precise re-ordering performed by the compiler used to build Xen. We have not been able to survey compilers; consequently we cannot say which compiler(s) might produce vulnerable code (with which code generation options). GCC documentation clearly suggests that re-ordering is possible. Arm systems will also be vulnerable if the CPU is able to re-order memory access. Please consult your CPU vendor. x86 systems are only vulnerable if a compiler performs re-ordering.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25603", url: "https://www.suse.com/security/cve/CVE-2020-25603", }, { category: "external", summary: "SUSE Bug 1176347 for CVE-2020-25603", url: "https://bugzilla.suse.com/1176347", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25603", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:12:25Z", details: "important", }, ], title: "CVE-2020-25603", }, { cve: "CVE-2020-25604", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25604", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. When migrating timers of x86 HVM guests between its vCPUs, the locking model used allows for a second vCPU of the same guest (also operating on the timers) to release a lock that it didn't acquire. The most likely effect of the issue is a hang or crash of the hypervisor, i.e., a Denial of Service (DoS). All versions of Xen are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only x86 HVM guests can leverage the vulnerability. x86 PV and PVH cannot leverage the vulnerability. Only guests with more than one vCPU can exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2020-25604", url: "https://www.suse.com/security/cve/CVE-2020-25604", }, { category: "external", summary: "SUSE Bug 1176343 for CVE-2020-25604", url: "https://bugzilla.suse.com/1176343", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25604", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_08-2.36.1.x86_64", "SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_08-2.36.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:12:25Z", details: "moderate", }, ], title: "CVE-2020-25604", }, ], }
suse-su-2020:2791-1
Vulnerability from csaf_suse
Notes
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "Security update for xen", title: "Title of the patch", }, { category: "description", text: "This update for xen fixes the following issues:\n\n- CVE-2020-25602: Fixed an issue where there was a crash when\n handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333)\n- CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path\n (bsc#1176341,XSA-334)\n- CVE-2020-25604: Fixed a race condition when migrating timers between x86 \n HVM vCPU-s (bsc#1176343,XSA-336)\n- CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)\n- CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)\n- CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)\n- CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)\n- CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)\n- CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)\n- CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)\n- Various other fixes (bsc#1027519)\n", title: "Description of the patch", }, { category: "details", text: "SUSE-2020-2791,SUSE-SLE-Module-Basesystem-15-SP2-2020-2791,SUSE-SLE-Module-Server-Applications-15-SP2-2020-2791", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_2791-1.json", }, { category: "self", summary: "URL for SUSE-SU-2020:2791-1", url: "https://www.suse.com/support/update/announcement/2020/suse-su-20202791-1/", }, { category: "self", summary: "E-Mail link for SUSE-SU-2020:2791-1", url: "https://lists.suse.com/pipermail/sle-security-updates/2020-September/007499.html", }, { category: "self", summary: "SUSE Bug 1027519", url: "https://bugzilla.suse.com/1027519", }, { category: "self", summary: "SUSE Bug 1176339", url: "https://bugzilla.suse.com/1176339", }, { category: "self", summary: "SUSE Bug 1176341", url: "https://bugzilla.suse.com/1176341", }, { category: "self", summary: "SUSE Bug 1176343", url: "https://bugzilla.suse.com/1176343", }, { category: "self", summary: "SUSE Bug 1176344", url: "https://bugzilla.suse.com/1176344", }, { category: "self", summary: "SUSE Bug 1176345", url: "https://bugzilla.suse.com/1176345", }, { category: "self", summary: "SUSE Bug 1176346", url: "https://bugzilla.suse.com/1176346", }, { category: "self", summary: "SUSE Bug 1176347", url: "https://bugzilla.suse.com/1176347", }, { category: "self", summary: "SUSE Bug 1176348", url: "https://bugzilla.suse.com/1176348", }, { category: "self", summary: "SUSE Bug 1176349", url: "https://bugzilla.suse.com/1176349", }, { category: "self", summary: "SUSE Bug 1176350", url: "https://bugzilla.suse.com/1176350", }, { category: "self", summary: "SUSE CVE CVE-2020-25595 page", url: "https://www.suse.com/security/cve/CVE-2020-25595/", }, { category: "self", summary: "SUSE CVE CVE-2020-25596 page", url: "https://www.suse.com/security/cve/CVE-2020-25596/", }, { category: "self", summary: "SUSE CVE CVE-2020-25597 page", url: "https://www.suse.com/security/cve/CVE-2020-25597/", }, { category: "self", summary: "SUSE CVE CVE-2020-25598 page", url: "https://www.suse.com/security/cve/CVE-2020-25598/", }, { category: "self", summary: "SUSE CVE CVE-2020-25599 page", url: "https://www.suse.com/security/cve/CVE-2020-25599/", }, { category: "self", summary: "SUSE CVE CVE-2020-25600 page", url: "https://www.suse.com/security/cve/CVE-2020-25600/", }, { category: "self", summary: "SUSE CVE CVE-2020-25601 page", url: "https://www.suse.com/security/cve/CVE-2020-25601/", }, { category: "self", summary: "SUSE CVE CVE-2020-25602 page", url: "https://www.suse.com/security/cve/CVE-2020-25602/", }, { category: "self", summary: "SUSE CVE CVE-2020-25603 page", url: "https://www.suse.com/security/cve/CVE-2020-25603/", }, { category: "self", summary: "SUSE CVE CVE-2020-25604 page", url: "https://www.suse.com/security/cve/CVE-2020-25604/", }, ], title: "Security update for xen", tracking: { current_release_date: "2020-09-29T12:13:49Z", generator: { date: "2020-09-29T12:13:49Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "SUSE-SU-2020:2791-1", initial_release_date: "2020-09-29T12:13:49Z", revision_history: [ { date: "2020-09-29T12:13:49Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "xen-4.13.1_08-3.10.1.aarch64", product: { name: "xen-4.13.1_08-3.10.1.aarch64", product_id: "xen-4.13.1_08-3.10.1.aarch64", }, }, { category: "product_version", name: "xen-devel-4.13.1_08-3.10.1.aarch64", product: { name: "xen-devel-4.13.1_08-3.10.1.aarch64", product_id: "xen-devel-4.13.1_08-3.10.1.aarch64", }, }, { category: "product_version", name: "xen-doc-html-4.13.1_08-3.10.1.aarch64", product: { name: "xen-doc-html-4.13.1_08-3.10.1.aarch64", product_id: "xen-doc-html-4.13.1_08-3.10.1.aarch64", }, }, { category: "product_version", name: "xen-libs-4.13.1_08-3.10.1.aarch64", product: { name: "xen-libs-4.13.1_08-3.10.1.aarch64", product_id: "xen-libs-4.13.1_08-3.10.1.aarch64", }, }, { category: "product_version", name: "xen-tools-4.13.1_08-3.10.1.aarch64", product: { name: "xen-tools-4.13.1_08-3.10.1.aarch64", product_id: "xen-tools-4.13.1_08-3.10.1.aarch64", }, }, { category: "product_version", name: "xen-tools-domU-4.13.1_08-3.10.1.aarch64", product: { name: "xen-tools-domU-4.13.1_08-3.10.1.aarch64", product_id: "xen-tools-domU-4.13.1_08-3.10.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "xen-libs-64bit-4.13.1_08-3.10.1.aarch64_ilp32", product: { name: "xen-libs-64bit-4.13.1_08-3.10.1.aarch64_ilp32", product_id: "xen-libs-64bit-4.13.1_08-3.10.1.aarch64_ilp32", }, }, ], category: "architecture", name: "aarch64_ilp32", }, { branches: [ { category: "product_version", name: "xen-devel-4.13.1_08-3.10.1.i586", product: { name: "xen-devel-4.13.1_08-3.10.1.i586", product_id: "xen-devel-4.13.1_08-3.10.1.i586", }, }, { category: "product_version", name: "xen-libs-4.13.1_08-3.10.1.i586", product: { name: "xen-libs-4.13.1_08-3.10.1.i586", product_id: "xen-libs-4.13.1_08-3.10.1.i586", }, }, { category: "product_version", name: "xen-tools-domU-4.13.1_08-3.10.1.i586", product: { name: "xen-tools-domU-4.13.1_08-3.10.1.i586", product_id: "xen-tools-domU-4.13.1_08-3.10.1.i586", }, }, ], category: "architecture", name: "i586", }, { branches: [ { category: "product_version", name: "xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", product: { name: "xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", product_id: "xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", }, }, ], category: "architecture", name: "noarch", }, { branches: [ { category: "product_version", name: "xen-4.13.1_08-3.10.1.x86_64", product: { name: "xen-4.13.1_08-3.10.1.x86_64", product_id: "xen-4.13.1_08-3.10.1.x86_64", }, }, { category: "product_version", name: "xen-devel-4.13.1_08-3.10.1.x86_64", product: { name: "xen-devel-4.13.1_08-3.10.1.x86_64", product_id: "xen-devel-4.13.1_08-3.10.1.x86_64", }, }, { category: "product_version", name: "xen-doc-html-4.13.1_08-3.10.1.x86_64", product: { name: "xen-doc-html-4.13.1_08-3.10.1.x86_64", product_id: "xen-doc-html-4.13.1_08-3.10.1.x86_64", }, }, { category: "product_version", name: "xen-libs-4.13.1_08-3.10.1.x86_64", product: { name: "xen-libs-4.13.1_08-3.10.1.x86_64", product_id: "xen-libs-4.13.1_08-3.10.1.x86_64", }, }, { category: "product_version", name: "xen-libs-32bit-4.13.1_08-3.10.1.x86_64", product: { name: "xen-libs-32bit-4.13.1_08-3.10.1.x86_64", product_id: "xen-libs-32bit-4.13.1_08-3.10.1.x86_64", }, }, { category: "product_version", name: "xen-tools-4.13.1_08-3.10.1.x86_64", product: { name: "xen-tools-4.13.1_08-3.10.1.x86_64", product_id: "xen-tools-4.13.1_08-3.10.1.x86_64", }, }, { category: "product_version", name: "xen-tools-domU-4.13.1_08-3.10.1.x86_64", product: { name: "xen-tools-domU-4.13.1_08-3.10.1.x86_64", product_id: "xen-tools-domU-4.13.1_08-3.10.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "SUSE Linux Enterprise Module for Basesystem 15 SP2", product: { name: "SUSE Linux Enterprise Module for Basesystem 15 SP2", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sle-module-basesystem:15:sp2", }, }, }, { category: "product_name", name: "SUSE Linux Enterprise Module for Server Applications 15 SP2", product: { name: "SUSE Linux Enterprise Module for Server Applications 15 SP2", product_id: "SUSE Linux Enterprise Module for Server Applications 15 SP2", product_identification_helper: { cpe: "cpe:/o:suse:sle-module-server-applications:15:sp2", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "xen-libs-4.13.1_08-3.10.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", }, product_reference: "xen-libs-4.13.1_08-3.10.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP2", }, { category: "default_component_of", full_product_name: { name: "xen-tools-domU-4.13.1_08-3.10.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2", product_id: "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", }, product_reference: "xen-tools-domU-4.13.1_08-3.10.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Basesystem 15 SP2", }, { category: "default_component_of", full_product_name: { name: "xen-4.13.1_08-3.10.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", product_id: "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", }, product_reference: "xen-4.13.1_08-3.10.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Server Applications 15 SP2", }, { category: "default_component_of", full_product_name: { name: "xen-devel-4.13.1_08-3.10.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", product_id: "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", }, product_reference: "xen-devel-4.13.1_08-3.10.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Server Applications 15 SP2", }, { category: "default_component_of", full_product_name: { name: "xen-tools-4.13.1_08-3.10.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", product_id: "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", }, product_reference: "xen-tools-4.13.1_08-3.10.1.x86_64", relates_to_product_reference: "SUSE Linux Enterprise Module for Server Applications 15 SP2", }, { category: "default_component_of", full_product_name: { name: "xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch as component of SUSE Linux Enterprise Module for Server Applications 15 SP2", product_id: "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", }, product_reference: "xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", relates_to_product_reference: "SUSE Linux Enterprise Module for Server Applications 15 SP2", }, ], }, vulnerabilities: [ { cve: "CVE-2020-25595", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25595", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitized values read back from device hardware registers. While devices strictly compliant with PCI specifications shouldn't be able to affect these registers, experience shows that it's very common for devices to have out-of-spec \"backdoor\" operations that can affect the result of these reads. A not fully trusted guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. Privilege escalation and information leaks cannot be excluded. All versions of Xen supporting PCI passthrough are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only guests with passed through PCI devices may be able to leverage the vulnerability. Only systems passing through devices with out-of-spec (\"backdoor\") functionality can cause issues. Experience shows that such out-of-spec functionality is common; unless you have reason to believe that your device does not have such functionality, it's better to assume that it does.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25595", url: "https://www.suse.com/security/cve/CVE-2020-25595", }, { category: "external", summary: "SUSE Bug 1176344 for CVE-2020-25595", url: "https://bugzilla.suse.com/1176344", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25595", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:49Z", details: "important", }, ], title: "CVE-2020-25595", }, { cve: "CVE-2020-25596", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25596", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a #GP fault, and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege #GP fault (typically fatal) rather than a user-privilege #GP fault (usually converted into SIGSEGV/etc.). Malicious or buggy userspace can crash the guest kernel, resulting in a VM Denial of Service. All versions of Xen from 3.2 onwards are vulnerable. Only x86 systems are vulnerable. ARM platforms are not vulnerable. Only x86 systems that support the SYSENTER instruction in 64bit mode are vulnerable. This is believed to be Intel, Centaur, and Shanghai CPUs. AMD and Hygon CPUs are not believed to be vulnerable. Only x86 PV guests can exploit the vulnerability. x86 PVH / HVM guests cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25596", url: "https://www.suse.com/security/cve/CVE-2020-25596", }, { category: "external", summary: "SUSE Bug 1176345 for CVE-2020-25596", url: "https://bugzilla.suse.com/1176345", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25596", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:49Z", details: "moderate", }, ], title: "CVE-2020-25596", }, { cve: "CVE-2020-25597", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25597", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once-valid event channels may not turn invalid. Logic in the handling of event channel operations in Xen assumes that an event channel, once valid, will not become invalid over the life time of a guest. However, operations like the resetting of all event channels may involve decreasing one of the bounds checked when determining validity. This may lead to bug checks triggering, crashing the host. An unprivileged guest may be able to crash Xen, leading to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only systems with untrusted guests permitted to create more than the default number of event channels are vulnerable. This number depends on the architecture and type of guest. For 32-bit x86 PV guests, this is 1023; for 64-bit x86 PV guests, and for all ARM guests, this number is 4095. Systems where untrusted guests are limited to fewer than this number are not vulnerable. Note that xl and libxl limit max_event_channels to 1023 by default, so systems using exclusively xl, libvirt+libxl, or their own toolstack based on libxl, and not explicitly setting max_event_channels, are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25597", url: "https://www.suse.com/security/cve/CVE-2020-25597", }, { category: "external", summary: "SUSE Bug 1176346 for CVE-2020-25597", url: "https://bugzilla.suse.com/1176346", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:49Z", details: "moderate", }, ], title: "CVE-2020-25597", }, { cve: "CVE-2020-25598", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25598", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource error path. The RCU (Read, Copy, Update) mechanism is a synchronisation primitive. A buggy error path in the XENMEM_acquire_resource exits without releasing an RCU reference, which is conceptually similar to forgetting to unlock a spinlock. A buggy or malicious HVM stubdomain can cause an RCU reference to be leaked. This causes subsequent administration operations, (e.g., CPU offline) to livelock, resulting in a host Denial of Service. The buggy codepath has been present since Xen 4.12. Xen 4.14 and later are vulnerable to the DoS. The side effects are believed to be benign on Xen 4.12 and 4.13, but patches are provided nevertheless. The vulnerability can generally only be exploited by x86 HVM VMs, as these are generally the only type of VM that have a Qemu stubdomain. x86 PV and PVH domains, as well as ARM VMs, typically don't use a stubdomain. Only VMs using HVM stubdomains can exploit the vulnerability. VMs using PV stubdomains, or with emulators running in dom0, cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25598", url: "https://www.suse.com/security/cve/CVE-2020-25598", }, { category: "external", summary: "SUSE Bug 1176341 for CVE-2020-25598", url: "https://bugzilla.suse.com/1176341", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:49Z", details: "moderate", }, ], title: "CVE-2020-25598", }, { cve: "CVE-2020-25599", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25599", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of EVTCHNOP_reset (potentially by a guest on itself) or XEN_DOMCTL_soft_reset (by itself covered by XSA-77) can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses or triggering of bug checks. In particular, x86 PV guests may be able to elevate their privilege to that of the host. Host and guest crashes are also possible, leading to a Denial of Service (DoS). Information leaks cannot be ruled out. All Xen versions from 4.5 onwards are vulnerable. Xen versions 4.4 and earlier are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25599", url: "https://www.suse.com/security/cve/CVE-2020-25599", }, { category: "external", summary: "SUSE Bug 1176349 for CVE-2020-25599", url: "https://bugzilla.suse.com/1176349", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 8.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:49Z", details: "important", }, ], title: "CVE-2020-25599", }, { cve: "CVE-2020-25600", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25600", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits on the number of usable event channels for 32-bit x86 domains vs 64-bit or Arm (either bitness) ones. 32-bit x86 domains can use only 1023 channels, due to limited space in their shared (between guest and Xen) information structure, whereas all other domains can use up to 4095 in this model. The recording of the respective limit during domain initialization, however, has occurred at a time where domains are still deemed to be 64-bit ones, prior to actually honoring respective domain properties. At the point domains get recognized as 32-bit ones, the limit didn't get updated accordingly. Due to this misbehavior in Xen, 32-bit domains (including Domain 0) servicing other domains may observe event channel allocations to succeed when they should really fail. Subsequent use of such event channels would then possibly lead to corruption of other parts of the shared info structure. An unprivileged guest may cause another domain, in particular Domain 0, to misbehave. This may lead to a Denial of Service (DoS) for the entire system. All Xen versions from 4.4 onwards are vulnerable. Xen versions 4.3 and earlier are not vulnerable. Only x86 32-bit domains servicing other domains are vulnerable. Arm systems, as well as x86 64-bit domains, are not vulnerable.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25600", url: "https://www.suse.com/security/cve/CVE-2020-25600", }, { category: "external", summary: "SUSE Bug 1176348 for CVE-2020-25600", url: "https://bugzilla.suse.com/1176348", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:49Z", details: "important", }, ], title: "CVE-2020-25600", }, { cve: "CVE-2020-25601", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25601", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() / evtchn_destroy(). In particular, the FIFO event channel model allows guests to have a large number of event channels active at a time. Closing all of these (when resetting all event channels or when cleaning up after the guest) may take extended periods of time. So far, there was no arrangement for preemption at suitable intervals, allowing a CPU to spend an almost unbounded amount of time in the processing of these operations. Malicious or buggy guest kernels can mount a Denial of Service (DoS) attack affecting the entire system. All Xen versions are vulnerable in principle. Whether versions 4.3 and older are vulnerable depends on underlying hardware characteristics.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25601", url: "https://www.suse.com/security/cve/CVE-2020-25601", }, { category: "external", summary: "SUSE Bug 1176350 for CVE-2020-25601", url: "https://bugzilla.suse.com/1176350", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:49Z", details: "moderate", }, ], title: "CVE-2020-25601", }, { cve: "CVE-2020-25602", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25602", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25602", url: "https://www.suse.com/security/cve/CVE-2020-25602", }, { category: "external", summary: "SUSE Bug 1176339 for CVE-2020-25602", url: "https://bugzilla.suse.com/1176339", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 6.2, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:49Z", details: "moderate", }, ], title: "CVE-2020-25602", }, { cve: "CVE-2020-25603", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25603", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such a sequence is missing an appropriate memory barrier (e.g., smp_*mb()) to prevent both the compiler and CPU from re-ordering access. A malicious guest may be able to cause a hypervisor crash resulting in a Denial of Service (DoS). Information leak and privilege escalation cannot be excluded. Systems running all versions of Xen are affected. Whether a system is vulnerable will depend on the CPU and compiler used to build Xen. For all systems, the presence and the scope of the vulnerability depend on the precise re-ordering performed by the compiler used to build Xen. We have not been able to survey compilers; consequently we cannot say which compiler(s) might produce vulnerable code (with which code generation options). GCC documentation clearly suggests that re-ordering is possible. Arm systems will also be vulnerable if the CPU is able to re-order memory access. Please consult your CPU vendor. x86 systems are only vulnerable if a compiler performs re-ordering.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25603", url: "https://www.suse.com/security/cve/CVE-2020-25603", }, { category: "external", summary: "SUSE Bug 1176347 for CVE-2020-25603", url: "https://bugzilla.suse.com/1176347", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25603", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:49Z", details: "important", }, ], title: "CVE-2020-25603", }, { cve: "CVE-2020-25604", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2020-25604", }, ], notes: [ { category: "general", text: "An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. When migrating timers of x86 HVM guests between its vCPUs, the locking model used allows for a second vCPU of the same guest (also operating on the timers) to release a lock that it didn't acquire. The most likely effect of the issue is a hang or crash of the hypervisor, i.e., a Denial of Service (DoS). All versions of Xen are affected. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only x86 HVM guests can leverage the vulnerability. x86 PV and PVH cannot leverage the vulnerability. Only guests with more than one vCPU can exploit the vulnerability.", title: "CVE description", }, ], product_status: { recommended: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, references: [ { category: "external", summary: "CVE-2020-25604", url: "https://www.suse.com/security/cve/CVE-2020-25604", }, { category: "external", summary: "SUSE Bug 1176343 for CVE-2020-25604", url: "https://bugzilla.suse.com/1176343", }, { category: "external", summary: "SUSE Bug 1178658 for CVE-2020-25604", url: "https://bugzilla.suse.com/1178658", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, products: [ "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_08-3.10.1.x86_64", "SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_08-3.10.1.noarch", ], }, ], threats: [ { category: "impact", date: "2020-09-29T12:13:49Z", details: "moderate", }, ], title: "CVE-2020-25604", }, ], }
gsd-2020-25602
Vulnerability from gsd
{ GSD: { alias: "CVE-2020-25602", description: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", id: "GSD-2020-25602", references: [ "https://www.suse.com/security/cve/CVE-2020-25602.html", "https://www.debian.org/security/2020/dsa-4769", "https://ubuntu.com/security/CVE-2020-25602", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2020-25602", ], details: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", id: "GSD-2020-25602", modified: "2023-12-13T01:21:56.857358Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2020-25602", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "https://xenbits.xen.org/xsa/advisory-333.html", refsource: "MISC", url: "https://xenbits.xen.org/xsa/advisory-333.html", }, { name: "FEDORA-2020-306b84fd07", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/", }, { name: "FEDORA-2020-f668e579be", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/", }, { name: "DSA-4769", refsource: "DEBIAN", url: "https://www.debian.org/security/2020/dsa-4769", }, { name: "openSUSE-SU-2020:1608", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html", }, { name: "FEDORA-2020-d46fe34349", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/", }, { name: "GLSA-202011-06", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/202011-06", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*", cpe_name: [], versionEndIncluding: "4.14.0", versionStartIncluding: "4.11.0", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2020-25602", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-755", }, ], }, ], }, references: { reference_data: [ { name: "https://xenbits.xen.org/xsa/advisory-333.html", refsource: "MISC", tags: [ "Patch", "Vendor Advisory", ], url: "https://xenbits.xen.org/xsa/advisory-333.html", }, { name: "FEDORA-2020-306b84fd07", refsource: "FEDORA", tags: [ "Third Party Advisory", ], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/", }, { name: "FEDORA-2020-f668e579be", refsource: "FEDORA", tags: [ "Third Party Advisory", ], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/", }, { name: "DSA-4769", refsource: "DEBIAN", tags: [ "Third Party Advisory", ], url: "https://www.debian.org/security/2020/dsa-4769", }, { name: "openSUSE-SU-2020:1608", refsource: "SUSE", tags: [ "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html", }, { name: "FEDORA-2020-d46fe34349", refsource: "FEDORA", tags: [ "Mailing List", "Third Party Advisory", ], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/", }, { name: "GLSA-202011-06", refsource: "GENTOO", tags: [ "Third Party Advisory", ], url: "https://security.gentoo.org/glsa/202011-06", }, ], }, }, impact: { baseMetricV2: { acInsufInfo: false, cvssV2: { accessComplexity: "LOW", accessVector: "LOCAL", authentication: "SINGLE", availabilityImpact: "COMPLETE", baseScore: 4.6, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:L/AC:L/Au:S/C:N/I:N/A:C", version: "2.0", }, exploitabilityScore: 3.1, impactScore: 6.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "MEDIUM", userInteractionRequired: false, }, baseMetricV3: { cvssV3: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 1.5, impactScore: 4, }, }, lastModifiedDate: "2022-09-30T03:44Z", publishedDate: "2020-09-23T22:15Z", }, }, }
ghsa-mv4f-fvpr-9x8h
Vulnerability from github
An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.
{ affected: [], aliases: [ "CVE-2020-25602", ], database_specific: { cwe_ids: [ "CWE-755", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2020-09-23T22:15:00Z", severity: "MODERATE", }, details: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", id: "GHSA-mv4f-fvpr-9x8h", modified: "2022-10-01T00:00:25Z", published: "2022-05-24T17:29:25Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2020-25602", }, { type: "WEB", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN", }, { type: "WEB", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM", }, { type: "WEB", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE", }, { type: "WEB", url: "https://security.gentoo.org/glsa/202011-06", }, { type: "WEB", url: "https://www.debian.org/security/2020/dsa-4769", }, { type: "WEB", url: "https://xenbits.xen.org/xsa/advisory-333.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html", }, ], schema_version: "1.4.0", severity: [ { score: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", type: "CVSS_V3", }, ], }
fkie_cve-2020-25602
Vulnerability from fkie_nvd
Vendor | Product | Version | |
---|---|---|---|
xen | xen | * | |
fedoraproject | fedora | 31 | |
fedoraproject | fedora | 32 | |
fedoraproject | fedora | 33 | |
debian | debian_linux | 10.0 | |
opensuse | leap | 15.2 |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*", matchCriteriaId: "93BEAF43-660C-496C-A44D-5922C59F2899", versionEndIncluding: "4.14.0", versionStartIncluding: "4.11.0", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*", matchCriteriaId: "80F0FA5D-8D3B-4C0E-81E2-87998286AF33", vulnerable: true, }, { criteria: "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*", matchCriteriaId: "36D96259-24BD-44E2-96D9-78CE1D41F956", vulnerable: true, }, { criteria: "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*", matchCriteriaId: "E460AA51-FCDA-46B9-AE97-E6676AA5E194", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", matchCriteriaId: "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*", matchCriteriaId: "B009C22E-30A4-4288-BCF6-C3E81DEAF45A", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Specific Registers, Xen first reads the value from hardware to use as the basis for auditing the guest access. For the MISC_ENABLE MSR, which is an Intel specific MSR, this MSR read is performed without error handling for a #GP fault, which is the consequence of trying to read this MSR on non-Intel hardware. A buggy or malicious PV guest administrator can crash Xen, resulting in a host Denial of Service. Only x86 systems are vulnerable. ARM systems are not vulnerable. Only Xen versions 4.11 and onwards are vulnerable. 4.10 and earlier are not vulnerable. Only x86 systems that do not implement the MISC_ENABLE MSR (0x1a0) are vulnerable. AMD and Hygon systems do not implement this MSR and are vulnerable. Intel systems do implement this MSR and are not vulnerable. Other manufacturers have not been checked. Only x86 PV guests can exploit the vulnerability. x86 HVM/PVH guests cannot exploit the vulnerability.", }, { lang: "es", value: "Se detectó un problema en Xen versiones hasta 4.14.x. Un invitado PV x86 puede desencadenar un bloqueo del Sistema Operativo del host cuando maneja el acceso de invitado para MSR_MISC_ENABLE. Cuando un invitado accede a ciertos registros específicos del modelo, Xen primero lee el valor del hardware para usarlo como base para auditar el acceso de invitado. Para el MSR MISC_ENABLE, que es un MSR específico de Intel, esta lectura de MSR se realiza sin manejo de errores para un fallo #GP, que es la consecuencia de intentar leer este MSR en hardware que no es de Intel. Un administrador invitado de PV con errores o malicioso puede bloquear Xen y causar una Denegación de Servicio del host. Solo los sistemas x86 son vulnerables. Los sistemas ARM no son vulnerables. Solo las versiones de Xen 4.11 y posteriores son vulnerables. Las versiones 4.10 y anteriores no son vulnerables. Solo los sistemas x86 que no implementan MISC_ENABLE MSR (0x1a0) son vulnerables. Los sistemas AMD e Hygon no implementan este MSR y son vulnerables. Los sistemas Intel implementan este MSR y no son vulnerables. No se han comprobado otros fabricantes. Solo los invitados PV x86 pueden explotar la vulnerabilidad. Los invitados HVM/PVH x86 no pueden explotar la vulnerabilidad.", }, ], id: "CVE-2020-25602", lastModified: "2024-11-21T05:18:12.690", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "LOCAL", authentication: "SINGLE", availabilityImpact: "COMPLETE", baseScore: 4.6, confidentialityImpact: "NONE", integrityImpact: "NONE", vectorString: "AV:L/AC:L/Au:S/C:N/I:N/A:C", version: "2.0", }, exploitabilityScore: 3.1, impactScore: 6.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "HIGH", scope: "CHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 1.5, impactScore: 4, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2020-09-23T22:15:13.790", references: [ { source: "cve@mitre.org", tags: [ "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html", }, { source: "cve@mitre.org", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/", }, { source: "cve@mitre.org", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/", }, { source: "cve@mitre.org", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", ], url: "https://security.gentoo.org/glsa/202011-06", }, { source: "cve@mitre.org", tags: [ "Third Party Advisory", ], url: "https://www.debian.org/security/2020/dsa-4769", }, { source: "cve@mitre.org", tags: [ "Patch", "Vendor Advisory", ], url: "https://xenbits.xen.org/xsa/advisory-333.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00008.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JRXMKEMQRQYWYEPHVBIWUEAVQ3LU4FN/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA633Y3G5KX7MKRN4PFEGM3IVTJMBEOM/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RJZERRBJN6E6STDCHT4JHP4MI6TKBCJE/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://security.gentoo.org/glsa/202011-06", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "https://www.debian.org/security/2020/dsa-4769", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Vendor Advisory", ], url: "https://xenbits.xen.org/xsa/advisory-333.html", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-755", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Log in or create an account to share your comment.
This schema specifies the format of a comment related to a security advisory.
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.