csaf_opensuse - opensuse-su-2024:13442-1

Vulnerability from csaf_opensuse

Published

2024-06-15 00:00

Modified

2024-06-15 00:00

Summary

xen-4.18.0_02-1.1 on GA media

Notes

Title of the patch

xen-4.18.0_02-1.1 on GA media

Description of the patch

These are all security issues fixed in the xen-4.18.0_02-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames

openSUSE-Tumbleweed-2024-13442

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "xen-4.18.0_02-1.1 on GA media",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "These are all security issues fixed in the xen-4.18.0_02-1.1 package on the GA media of openSUSE Tumbleweed.",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "openSUSE-Tumbleweed-2024-13442",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13442-1.json",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-34323 page",
            url: "https://www.suse.com/security/cve/CVE-2023-34323/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-34325 page",
            url: "https://www.suse.com/security/cve/CVE-2023-34325/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-34326 page",
            url: "https://www.suse.com/security/cve/CVE-2023-34326/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-34327 page",
            url: "https://www.suse.com/security/cve/CVE-2023-34327/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-46835 page",
            url: "https://www.suse.com/security/cve/CVE-2023-46835/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-46836 page",
            url: "https://www.suse.com/security/cve/CVE-2023-46836/",
         },
      ],
      title: "xen-4.18.0_02-1.1 on GA media",
      tracking: {
         current_release_date: "2024-06-15T00:00:00Z",
         generator: {
            date: "2024-06-15T00:00:00Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "openSUSE-SU-2024:13442-1",
         initial_release_date: "2024-06-15T00:00:00Z",
         revision_history: [
            {
               date: "2024-06-15T00:00:00Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "xen-4.18.0_02-1.1.aarch64",
                        product: {
                           name: "xen-4.18.0_02-1.1.aarch64",
                           product_id: "xen-4.18.0_02-1.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-devel-4.18.0_02-1.1.aarch64",
                        product: {
                           name: "xen-devel-4.18.0_02-1.1.aarch64",
                           product_id: "xen-devel-4.18.0_02-1.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-doc-html-4.18.0_02-1.1.aarch64",
                        product: {
                           name: "xen-doc-html-4.18.0_02-1.1.aarch64",
                           product_id: "xen-doc-html-4.18.0_02-1.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-libs-4.18.0_02-1.1.aarch64",
                        product: {
                           name: "xen-libs-4.18.0_02-1.1.aarch64",
                           product_id: "xen-libs-4.18.0_02-1.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-4.18.0_02-1.1.aarch64",
                        product: {
                           name: "xen-tools-4.18.0_02-1.1.aarch64",
                           product_id: "xen-tools-4.18.0_02-1.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-domU-4.18.0_02-1.1.aarch64",
                        product: {
                           name: "xen-tools-domU-4.18.0_02-1.1.aarch64",
                           product_id: "xen-tools-domU-4.18.0_02-1.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                        product: {
                           name: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                           product_id: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "xen-4.18.0_02-1.1.ppc64le",
                        product: {
                           name: "xen-4.18.0_02-1.1.ppc64le",
                           product_id: "xen-4.18.0_02-1.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-devel-4.18.0_02-1.1.ppc64le",
                        product: {
                           name: "xen-devel-4.18.0_02-1.1.ppc64le",
                           product_id: "xen-devel-4.18.0_02-1.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-doc-html-4.18.0_02-1.1.ppc64le",
                        product: {
                           name: "xen-doc-html-4.18.0_02-1.1.ppc64le",
                           product_id: "xen-doc-html-4.18.0_02-1.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-libs-4.18.0_02-1.1.ppc64le",
                        product: {
                           name: "xen-libs-4.18.0_02-1.1.ppc64le",
                           product_id: "xen-libs-4.18.0_02-1.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-4.18.0_02-1.1.ppc64le",
                        product: {
                           name: "xen-tools-4.18.0_02-1.1.ppc64le",
                           product_id: "xen-tools-4.18.0_02-1.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-domU-4.18.0_02-1.1.ppc64le",
                        product: {
                           name: "xen-tools-domU-4.18.0_02-1.1.ppc64le",
                           product_id: "xen-tools-domU-4.18.0_02-1.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                        product: {
                           name: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                           product_id: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "xen-4.18.0_02-1.1.s390x",
                        product: {
                           name: "xen-4.18.0_02-1.1.s390x",
                           product_id: "xen-4.18.0_02-1.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-devel-4.18.0_02-1.1.s390x",
                        product: {
                           name: "xen-devel-4.18.0_02-1.1.s390x",
                           product_id: "xen-devel-4.18.0_02-1.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-doc-html-4.18.0_02-1.1.s390x",
                        product: {
                           name: "xen-doc-html-4.18.0_02-1.1.s390x",
                           product_id: "xen-doc-html-4.18.0_02-1.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-libs-4.18.0_02-1.1.s390x",
                        product: {
                           name: "xen-libs-4.18.0_02-1.1.s390x",
                           product_id: "xen-libs-4.18.0_02-1.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-4.18.0_02-1.1.s390x",
                        product: {
                           name: "xen-tools-4.18.0_02-1.1.s390x",
                           product_id: "xen-tools-4.18.0_02-1.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-domU-4.18.0_02-1.1.s390x",
                        product: {
                           name: "xen-tools-domU-4.18.0_02-1.1.s390x",
                           product_id: "xen-tools-domU-4.18.0_02-1.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                        product: {
                           name: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                           product_id: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "xen-4.18.0_02-1.1.x86_64",
                        product: {
                           name: "xen-4.18.0_02-1.1.x86_64",
                           product_id: "xen-4.18.0_02-1.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-devel-4.18.0_02-1.1.x86_64",
                        product: {
                           name: "xen-devel-4.18.0_02-1.1.x86_64",
                           product_id: "xen-devel-4.18.0_02-1.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-doc-html-4.18.0_02-1.1.x86_64",
                        product: {
                           name: "xen-doc-html-4.18.0_02-1.1.x86_64",
                           product_id: "xen-doc-html-4.18.0_02-1.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-libs-4.18.0_02-1.1.x86_64",
                        product: {
                           name: "xen-libs-4.18.0_02-1.1.x86_64",
                           product_id: "xen-libs-4.18.0_02-1.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-4.18.0_02-1.1.x86_64",
                        product: {
                           name: "xen-tools-4.18.0_02-1.1.x86_64",
                           product_id: "xen-tools-4.18.0_02-1.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-domU-4.18.0_02-1.1.x86_64",
                        product: {
                           name: "xen-tools-domU-4.18.0_02-1.1.x86_64",
                           product_id: "xen-tools-domU-4.18.0_02-1.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
                        product: {
                           name: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
                           product_id: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "openSUSE Tumbleweed",
                        product: {
                           name: "openSUSE Tumbleweed",
                           product_id: "openSUSE Tumbleweed",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:tumbleweed",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-4.18.0_02-1.1.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
            },
            product_reference: "xen-4.18.0_02-1.1.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-4.18.0_02-1.1.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
            },
            product_reference: "xen-4.18.0_02-1.1.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-4.18.0_02-1.1.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
            },
            product_reference: "xen-4.18.0_02-1.1.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-4.18.0_02-1.1.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
            },
            product_reference: "xen-4.18.0_02-1.1.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-devel-4.18.0_02-1.1.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
            },
            product_reference: "xen-devel-4.18.0_02-1.1.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-devel-4.18.0_02-1.1.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
            },
            product_reference: "xen-devel-4.18.0_02-1.1.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-devel-4.18.0_02-1.1.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
            },
            product_reference: "xen-devel-4.18.0_02-1.1.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-devel-4.18.0_02-1.1.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
            },
            product_reference: "xen-devel-4.18.0_02-1.1.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-doc-html-4.18.0_02-1.1.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
            },
            product_reference: "xen-doc-html-4.18.0_02-1.1.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-doc-html-4.18.0_02-1.1.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
            },
            product_reference: "xen-doc-html-4.18.0_02-1.1.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-doc-html-4.18.0_02-1.1.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
            },
            product_reference: "xen-doc-html-4.18.0_02-1.1.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-doc-html-4.18.0_02-1.1.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
            },
            product_reference: "xen-doc-html-4.18.0_02-1.1.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-libs-4.18.0_02-1.1.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
            },
            product_reference: "xen-libs-4.18.0_02-1.1.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-libs-4.18.0_02-1.1.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
            },
            product_reference: "xen-libs-4.18.0_02-1.1.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-libs-4.18.0_02-1.1.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
            },
            product_reference: "xen-libs-4.18.0_02-1.1.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-libs-4.18.0_02-1.1.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
            },
            product_reference: "xen-libs-4.18.0_02-1.1.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-4.18.0_02-1.1.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
            },
            product_reference: "xen-tools-4.18.0_02-1.1.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-4.18.0_02-1.1.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
            },
            product_reference: "xen-tools-4.18.0_02-1.1.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-4.18.0_02-1.1.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
            },
            product_reference: "xen-tools-4.18.0_02-1.1.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-4.18.0_02-1.1.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
            },
            product_reference: "xen-tools-4.18.0_02-1.1.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-domU-4.18.0_02-1.1.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
            },
            product_reference: "xen-tools-domU-4.18.0_02-1.1.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-domU-4.18.0_02-1.1.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
            },
            product_reference: "xen-tools-domU-4.18.0_02-1.1.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-domU-4.18.0_02-1.1.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
            },
            product_reference: "xen-tools-domU-4.18.0_02-1.1.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-domU-4.18.0_02-1.1.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
            },
            product_reference: "xen-tools-domU-4.18.0_02-1.1.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
            },
            product_reference: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
            },
            product_reference: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
            },
            product_reference: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
            },
            product_reference: "xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-34323",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-34323",
            },
         ],
         notes: [
            {
               category: "general",
               text: "When a transaction is committed, C Xenstored will first check\nthe quota is correct before attempting to commit any nodes.  It would\nbe possible that accounting is temporarily negative if a node has\nbeen removed outside of the transaction.\n\nUnfortunately, some versions of C Xenstored are assuming that the\nquota cannot be negative and are using assert() to confirm it.  This\nwill lead to C Xenstored crash when tools are built without -DNDEBUG\n(this is the default).\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-34323",
               url: "https://www.suse.com/security/cve/CVE-2023-34323",
            },
            {
               category: "external",
               summary: "SUSE Bug 1215744 for CVE-2023-34323",
               url: "https://bugzilla.suse.com/1215744",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-34323",
      },
      {
         cve: "CVE-2023-34325",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-34325",
            },
         ],
         notes: [
            {
               category: "general",
               text: "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nlibfsimage contains parsing code for several filesystems, most of them based on\ngrub-legacy code.  libfsimage is used by pygrub to inspect guest disks.\n\nPygrub runs as the same user as the toolstack (root in a priviledged domain).\n\nAt least one issue has been reported to the Xen Security Team that allows an\nattacker to trigger a stack buffer overflow in libfsimage.  After further\nanalisys the Xen Security Team is no longer confident in the suitability of\nlibfsimage when run against guest controlled input with super user priviledges.\n\nIn order to not affect current deployments that rely on pygrub patches are\nprovided in the resolution section of the advisory that allow running pygrub in\ndeprivileged mode.\n\nCVE-2023-4949 refers to the original issue in the upstream grub\nproject (\"An attacker with local access to a system (either through a\ndisk or external drive) can present a modified XFS partition to\ngrub-legacy in such a way to exploit a memory corruption in grub's XFS\nfile system implementation.\")  CVE-2023-34325 refers specifically to\nthe vulnerabilities in Xen's copy of libfsimage, which is decended\nfrom a very old version of grub.\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-34325",
               url: "https://www.suse.com/security/cve/CVE-2023-34325",
            },
            {
               category: "external",
               summary: "SUSE Bug 1215747 for CVE-2023-34325",
               url: "https://bugzilla.suse.com/1215747",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-34325",
      },
      {
         cve: "CVE-2023-34326",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-34326",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The caching invalidation guidelines from the AMD-Vi specification (48882—Rev\n3.07-PUB—Oct 2022) is incorrect on some hardware, as devices will malfunction\n(see stale DMA mappings) if some fields of the DTE are updated but the IOMMU\nTLB is not flushed.\n\nSuch stale DMA mappings can point to memory ranges not owned by the guest, thus\nallowing access to unindented memory regions.\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-34326",
               url: "https://www.suse.com/security/cve/CVE-2023-34326",
            },
            {
               category: "external",
               summary: "SUSE Bug 1215145 for CVE-2023-34326",
               url: "https://bugzilla.suse.com/1215145",
            },
            {
               category: "external",
               summary: "SUSE Bug 1215746 for CVE-2023-34326",
               url: "https://bugzilla.suse.com/1215746",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2023-34326",
      },
      {
         cve: "CVE-2023-34327",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-34327",
            },
         ],
         notes: [
            {
               category: "general",
               text: "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nAMD CPUs since ~2014 have extensions to normal x86 debugging functionality.\nXen supports guests using these extensions.\n\nUnfortunately there are errors in Xen's handling of the guest state, leading\nto denials of service.\n\n 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of\n    a previous vCPUs debug mask state.\n\n 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.\n    This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock\n    up the CPU entirely.\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-34327",
               url: "https://www.suse.com/security/cve/CVE-2023-34327",
            },
            {
               category: "external",
               summary: "SUSE Bug 1215748 for CVE-2023-34327",
               url: "https://bugzilla.suse.com/1215748",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-34327",
      },
      {
         cve: "CVE-2023-46835",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-46835",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The current setup of the quarantine page tables assumes that the\nquarantine domain (dom_io) has been initialized with an address width\nof DEFAULT_DOMAIN_ADDRESS_WIDTH (48) and hence 4 page table levels.\n\nHowever dom_io being a PV domain gets the AMD-Vi IOMMU page tables\nlevels based on the maximum (hot pluggable) RAM address, and hence on\nsystems with no RAM above the 512GB mark only 3 page-table levels are\nconfigured in the IOMMU.\n\nOn systems without RAM above the 512GB boundary\namd_iommu_quarantine_init() will setup page tables for the scratch\npage with 4 levels, while the IOMMU will be configured to use 3 levels\nonly, resulting in the last page table directory (PDE) effectively\nbecoming a page table entry (PTE), and hence a device in quarantine\nmode gaining write access to the page destined to be a PDE.\n\nDue to this page table level mismatch, the sink page the device gets\nread/write access to is no longer cleared between device assignment,\npossibly leading to data leaks.\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-46835",
               url: "https://www.suse.com/security/cve/CVE-2023-46835",
            },
            {
               category: "external",
               summary: "SUSE Bug 1216654 for CVE-2023-46835",
               url: "https://bugzilla.suse.com/1216654",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-46835",
      },
      {
         cve: "CVE-2023-46836",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-46836",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The fixes for XSA-422 (Branch Type Confusion) and XSA-434 (Speculative\nReturn Stack Overflow) are not IRQ-safe.  It was believed that the\nmitigations always operated in contexts with IRQs disabled.\n\nHowever, the original XSA-254 fix for Meltdown (XPTI) deliberately left\ninterrupts enabled on two entry paths; one unconditionally, and one\nconditionally on whether XPTI was active.\n\nAs BTC/SRSO and Meltdown affect different CPU vendors, the mitigations\nare not active together by default.  Therefore, there is a race\ncondition whereby a malicious PV guest can bypass BTC/SRSO protections\nand launch a BTC/SRSO attack against Xen.\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
               "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-46836",
               url: "https://www.suse.com/security/cve/CVE-2023-46836",
            },
            {
               category: "external",
               summary: "SUSE Bug 1216807 for CVE-2023-46836",
               url: "https://bugzilla.suse.com/1216807",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-devel-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-doc-html-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-libs-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-domU-4.18.0_02-1.1.x86_64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.aarch64",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.ppc64le",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.s390x",
                  "openSUSE Tumbleweed:xen-tools-xendomains-wait-disk-4.18.0_02-1.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-46836",
      },
   ],
}

CVE-2023-46836 (GCVE-0-2023-46836)

Vulnerability from cvelistv5

Published

2024-01-05 16:34

Modified

2024-08-02 20:53

Severity ?

Summary

The fixes for XSA-422 (Branch Type Confusion) and XSA-434 (Speculative Return Stack Overflow) are not IRQ-safe. It was believed that the mitigations always operated in contexts with IRQs disabled. However, the original XSA-254 fix for Meltdown (XPTI) deliberately left interrupts enabled on two entry paths; one unconditionally, and one conditionally on whether XPTI was active. As BTC/SRSO and Meltdown affect different CPU vendors, the mitigations are not active together by default. Therefore, there is a race condition whereby a malicious PV guest can bypass BTC/SRSO protections and launch a BTC/SRSO attack against Xen.

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-446.html

Impacted products

	Vendor	Product	Version
	Xen	Xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T20:53:21.940Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-446.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-446",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "All versions of Xen are vulnerable.\n\nXen is only vulnerable in default configurations on AMD and Hygon CPUs.\n\nXen is not believed to be vulnerable in default configurations on CPUs\nfrom other hardware vendors.\n\nOnly PV guests can leverage the vulnerability.\n",
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "This issue was discovered by Andrew Cooper of XenServer.\n",
            },
         ],
         datePublic: "2023-11-14T12:00:00Z",
         descriptions: [
            {
               lang: "en",
               value: "The fixes for XSA-422 (Branch Type Confusion) and XSA-434 (Speculative\nReturn Stack Overflow) are not IRQ-safe.  It was believed that the\nmitigations always operated in contexts with IRQs disabled.\n\nHowever, the original XSA-254 fix for Meltdown (XPTI) deliberately left\ninterrupts enabled on two entry paths; one unconditionally, and one\nconditionally on whether XPTI was active.\n\nAs BTC/SRSO and Meltdown affect different CPU vendors, the mitigations\nare not active together by default.  Therefore, there is a race\ncondition whereby a malicious PV guest can bypass BTC/SRSO protections\nand launch a BTC/SRSO attack against Xen.\n",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "An attacker in a PV guest might be able to infer the contents of memory\nbelonging to other guests.\n",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-05T16:34:59.036Z",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               url: "https://xenbits.xenproject.org/xsa/advisory-446.html",
            },
         ],
         title: "x86: BTC/SRSO fixes not fully effective",
         workarounds: [
            {
               lang: "en",
               value: "Running only HVM or PVH VMs will avoid the vulnerability.\n",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2023-46836",
      datePublished: "2024-01-05T16:34:59.036Z",
      dateReserved: "2023-10-27T07:55:35.332Z",
      dateUpdated: "2024-08-02T20:53:21.940Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-34325 (GCVE-0-2023-34325)

Vulnerability from cvelistv5

Published

2024-01-05 16:31

Modified

2024-08-02 16:10

Severity ?

Summary

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] libfsimage contains parsing code for several filesystems, most of them based on grub-legacy code. libfsimage is used by pygrub to inspect guest disks. Pygrub runs as the same user as the toolstack (root in a priviledged domain). At least one issue has been reported to the Xen Security Team that allows an attacker to trigger a stack buffer overflow in libfsimage. After further analisys the Xen Security Team is no longer confident in the suitability of libfsimage when run against guest controlled input with super user priviledges. In order to not affect current deployments that rely on pygrub patches are provided in the resolution section of the advisory that allow running pygrub in deprivileged mode. CVE-2023-4949 refers to the original issue in the upstream grub project ("An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.") CVE-2023-34325 refers specifically to the vulnerabilities in Xen's copy of libfsimage, which is decended from a very old version of grub.

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-443.html

Impacted products

	Vendor	Product	Version
	Xen	Xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T16:10:06.291Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-443.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-443",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "All Xen versions are affected.\n",
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "This issue was discovered by Ferdinand Nölscher of Google.\n",
            },
         ],
         datePublic: "2023-10-10T12:00:00Z",
         descriptions: [
            {
               lang: "en",
               value: "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nlibfsimage contains parsing code for several filesystems, most of them based on\ngrub-legacy code.  libfsimage is used by pygrub to inspect guest disks.\n\nPygrub runs as the same user as the toolstack (root in a priviledged domain).\n\nAt least one issue has been reported to the Xen Security Team that allows an\nattacker to trigger a stack buffer overflow in libfsimage.  After further\nanalisys the Xen Security Team is no longer confident in the suitability of\nlibfsimage when run against guest controlled input with super user priviledges.\n\nIn order to not affect current deployments that rely on pygrub patches are\nprovided in the resolution section of the advisory that allow running pygrub in\ndeprivileged mode.\n\nCVE-2023-4949 refers to the original issue in the upstream grub\nproject (\"An attacker with local access to a system (either through a\ndisk or external drive) can present a modified XFS partition to\ngrub-legacy in such a way to exploit a memory corruption in grub’s XFS\nfile system implementation.\")  CVE-2023-34325 refers specifically to\nthe vulnerabilities in Xen's copy of libfsimage, which is decended\nfrom a very old version of grub.\n",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "A guest using pygrub can escalate its privilege to that of the domain\nconstruction tools (i.e., normally, to control of the host).\n",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-05T16:31:09.660Z",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               url: "https://xenbits.xenproject.org/xsa/advisory-443.html",
            },
         ],
         title: "Multiple vulnerabilities in libfsimage disk handling",
         workarounds: [
            {
               lang: "en",
               value: "Ensuring that guests do not use the pygrub bootloader will avoid this\nvulnerability.\n\nFor cases where the PV guest is known to be 64bit, and uses grub2 as a\nbootloader, pvgrub is a suitable alternative pygrub.\n\nRunning only HVM guests will avoid the vulnerability.\n",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2023-34325",
      datePublished: "2024-01-05T16:31:09.660Z",
      dateReserved: "2023-06-01T10:44:17.065Z",
      dateUpdated: "2024-08-02T16:10:06.291Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-34327 (GCVE-0-2023-34327)

Vulnerability from cvelistv5

Published

2024-01-05 16:34

Modified

2024-08-02 16:10

Severity ?

Summary

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-444.html

Impacted products

	Vendor	Product	Version
	Xen	Xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T16:10:06.637Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-444.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-444",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "Only AMD/Hygon hardware supporting the DBEXT feature are vulnerable.\nThis is believed to be the Steamroller microarchitecture and later.\n\nFor CVE-2023-34327, Xen versions 4.5 and later are vulnerable.\n\nFor CVE-2023-34328, Xen version between 4.5 and 4.13 are vulnerable.\nThe issue is benign in Xen 4.14 and later owing to an unrelated change.\n",
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "This issue was discovered by Andrew Cooper of XenServer.\n",
            },
         ],
         datePublic: "2023-10-10T12:00:00Z",
         descriptions: [
            {
               lang: "en",
               value: "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nAMD CPUs since ~2014 have extensions to normal x86 debugging functionality.\nXen supports guests using these extensions.\n\nUnfortunately there are errors in Xen's handling of the guest state, leading\nto denials of service.\n\n 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of\n    a previous vCPUs debug mask state.\n\n 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.\n    This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock\n    up the CPU entirely.\n",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "For CVE-2023-34327, any guest (PV or HVM) using Debug Masks normally for\nit's own purposes can cause incorrect behaviour in an unrelated HVM\nvCPU, most likely resulting in a guest crash.\n\nFor CVE-2023-34328, a buggy or malicious PV guest kernel can lock up the\nhost.\n",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-05T16:34:10.958Z",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               url: "https://xenbits.xenproject.org/xsa/advisory-444.html",
            },
         ],
         title: "x86/AMD: Debug Mask handling",
         workarounds: [
            {
               lang: "en",
               value: "For CVE-2023-34327, HVM VMs which can see the DBEXT feature are not\nsusceptible to running in the wrong state.  By default, VMs will see the\nDBEXT feature on capable hardware, and when not explicitly levelled for\nmigration compatibility.\n\nFor CVE-2023-34328, PV VMs which cannot see the DBEXT feature cannot\nleverage the vulnerability.\n",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2023-34327",
      datePublished: "2024-01-05T16:34:10.958Z",
      dateReserved: "2023-06-01T10:44:17.066Z",
      dateUpdated: "2024-08-02T16:10:06.637Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-34323 (GCVE-0-2023-34323)

Vulnerability from cvelistv5

Published

2024-01-05 16:30

Modified

2024-08-02 16:10

Severity ?

Summary

When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes. It would be possible that accounting is temporarily negative if a node has been removed outside of the transaction. Unfortunately, some versions of C Xenstored are assuming that the quota cannot be negative and are using assert() to confirm it. This will lead to C Xenstored crash when tools are built without -DNDEBUG (this is the default).

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-440.html

Impacted products

	Vendor	Product	Version
	Xen	Xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T16:10:06.813Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-440.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-440",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "All versions of Xen up to and including 4.17 are vulnerable if XSA-326\nwas ingested.\n\nAll Xen systems using C Xenstored are vulnerable.  C Xenstored built\nusing -DNDEBUG (can be specified via EXTRA_CFLAGS_XEN_TOOLS=-DNDEBUG)\nare not vulnerable.  Systems using the OCaml variant of Xenstored are\nnot vulnerable.\n",
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "This issue was discovered by Stanislav Uschakow and Julien Grall, all\nfrom Amazon.\n",
            },
         ],
         datePublic: "2023-10-10T11:26:00Z",
         descriptions: [
            {
               lang: "en",
               value: "When a transaction is committed, C Xenstored will first check\nthe quota is correct before attempting to commit any nodes.  It would\nbe possible that accounting is temporarily negative if a node has\nbeen removed outside of the transaction.\n\nUnfortunately, some versions of C Xenstored are assuming that the\nquota cannot be negative and are using assert() to confirm it.  This\nwill lead to C Xenstored crash when tools are built without -DNDEBUG\n(this is the default).\n",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "A malicious guest could craft a transaction that will hit the C\nXenstored bug and crash it.  This will result to the inability to\nperform any further domain administration like starting new guests,\nor adding/removing resources to or from any existing guest.\n",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-05T16:30:32.305Z",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               url: "https://xenbits.xenproject.org/xsa/advisory-440.html",
            },
         ],
         title: "xenstored: A transaction conflict can crash C Xenstored",
         workarounds: [
            {
               lang: "en",
               value: "The problem can be avoided by using OCaml Xenstored variant.\n",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2023-34323",
      datePublished: "2024-01-05T16:30:32.305Z",
      dateReserved: "2023-06-01T10:44:17.065Z",
      dateUpdated: "2024-08-02T16:10:06.813Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-34326 (GCVE-0-2023-34326)

Vulnerability from cvelistv5

Published

2024-01-05 16:30

Modified

2024-08-02 16:10

Severity ?

Summary

The caching invalidation guidelines from the AMD-Vi specification (48882—Rev 3.07-PUB—Oct 2022) is incorrect on some hardware, as devices will malfunction (see stale DMA mappings) if some fields of the DTE are updated but the IOMMU TLB is not flushed. Such stale DMA mappings can point to memory ranges not owned by the guest, thus allowing access to unindented memory regions.

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-442.html

Impacted products

	Vendor	Product	Version
	Xen	Xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T16:10:06.955Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-442.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-442",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "All Xen versions supporting PCI passthrough are affected.\n\nOnly x86 AMD systems with IOMMU hardware are vulnerable.\n\nOnly x86 guests which have physical devices passed through to them can\nleverage the vulnerability.\n",
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "This issue was discovered by Roger Pau Monné of XenServer.\n",
            },
         ],
         datePublic: "2023-10-10T11:26:00Z",
         descriptions: [
            {
               lang: "en",
               value: "The caching invalidation guidelines from the AMD-Vi specification (48882—Rev\n3.07-PUB—Oct 2022) is incorrect on some hardware, as devices will malfunction\n(see stale DMA mappings) if some fields of the DTE are updated but the IOMMU\nTLB is not flushed.\n\nSuch stale DMA mappings can point to memory ranges not owned by the guest, thus\nallowing access to unindented memory regions.\n",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "Privilege escalation, Denial of Service (DoS) affecting the entire host,\nand information leaks.\n",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-05T16:30:57.225Z",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               url: "https://xenbits.xenproject.org/xsa/advisory-442.html",
            },
         ],
         title: "x86/AMD: missing IOMMU TLB flushing",
         workarounds: [
            {
               lang: "en",
               value: "Not passing through physical devices to guests will avoid the vulnerability.\n",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2023-34326",
      datePublished: "2024-01-05T16:30:57.225Z",
      dateReserved: "2023-06-01T10:44:17.065Z",
      dateUpdated: "2024-08-02T16:10:06.955Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2023-46835 (GCVE-0-2023-46835)

Vulnerability from cvelistv5

Published

2024-01-05 16:34

Modified

2024-09-04 19:39

Severity ?

Summary

The current setup of the quarantine page tables assumes that the quarantine domain (dom_io) has been initialized with an address width of DEFAULT_DOMAIN_ADDRESS_WIDTH (48) and hence 4 page table levels. However dom_io being a PV domain gets the AMD-Vi IOMMU page tables levels based on the maximum (hot pluggable) RAM address, and hence on systems with no RAM above the 512GB mark only 3 page-table levels are configured in the IOMMU. On systems without RAM above the 512GB boundary amd_iommu_quarantine_init() will setup page tables for the scratch page with 4 levels, while the IOMMU will be configured to use 3 levels only, resulting in the last page table directory (PDE) effectively becoming a page table entry (PTE), and hence a device in quarantine mode gaining write access to the page destined to be a PDE. Due to this page table level mismatch, the sink page the device gets read/write access to is no longer cleared between device assignment, possibly leading to data leaks.

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-445.html

Impacted products

	Vendor	Product	Version
	Xen	Xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T20:53:21.879Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-445.html",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-46835",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-04-12T04:00:28.791183Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-09-04T19:39:59.020Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-445",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "All Xen versions supporting PCI passthrough are affected.\n\nOnly x86 AMD systems with IOMMU hardware are vulnerable.\n\nOnly x86 guests which have physical devices passed through to them can\nleverage the vulnerability.\n",
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "This issue was discovered by Roger Pau Monné of XenServer.\n",
            },
         ],
         datePublic: "2023-11-14T12:00:00Z",
         descriptions: [
            {
               lang: "en",
               value: "The current setup of the quarantine page tables assumes that the\nquarantine domain (dom_io) has been initialized with an address width\nof DEFAULT_DOMAIN_ADDRESS_WIDTH (48) and hence 4 page table levels.\n\nHowever dom_io being a PV domain gets the AMD-Vi IOMMU page tables\nlevels based on the maximum (hot pluggable) RAM address, and hence on\nsystems with no RAM above the 512GB mark only 3 page-table levels are\nconfigured in the IOMMU.\n\nOn systems without RAM above the 512GB boundary\namd_iommu_quarantine_init() will setup page tables for the scratch\npage with 4 levels, while the IOMMU will be configured to use 3 levels\nonly, resulting in the last page table directory (PDE) effectively\nbecoming a page table entry (PTE), and hence a device in quarantine\nmode gaining write access to the page destined to be a PDE.\n\nDue to this page table level mismatch, the sink page the device gets\nread/write access to is no longer cleared between device assignment,\npossibly leading to data leaks.\n",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "A device in quarantine mode can access data from previous quarantine\npage table usages, possibly leaking data used by previous domains that\nalso had the device assigned.\n",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-05T16:34:49.531Z",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               url: "https://xenbits.xenproject.org/xsa/advisory-445.html",
            },
         ],
         title: "x86/AMD: mismatch in IOMMU quarantine page table levels",
         workarounds: [
            {
               lang: "en",
               value: "Not passing through physical devices to guests will avoid the\nvulnerability.\n\nNot using quarantine scratch-page mode will avoid the vulnerability,\nbut could result in other issues.\n",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2023-46835",
      datePublished: "2024-01-05T16:34:49.531Z",
      dateReserved: "2023-10-27T07:55:35.331Z",
      dateUpdated: "2024-09-04T19:39:59.020Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_opensuse

CVE-2023-46836 (GCVE-0-2023-46836)

Vulnerability from cvelistv5

CVE-2023-34325 (GCVE-0-2023-34325)

Vulnerability from cvelistv5

CVE-2023-34327 (GCVE-0-2023-34327)

Vulnerability from cvelistv5

CVE-2023-34323 (GCVE-0-2023-34323)

Vulnerability from cvelistv5

CVE-2023-34326 (GCVE-0-2023-34326)

Vulnerability from cvelistv5

CVE-2023-46835 (GCVE-0-2023-46835)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature