SUSE-SU-2015:1042-1

Vulnerability from csaf_suse - Published: 2015-06-03 12:47 - Updated: 2026-09-20 12:03
Summary
Security update for xen
Severity
Important
Notes
Title of the patch: Security update for xen
Description of the patch: Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed: * CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu (XSA-128) (bnc#931625) * CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests (XSA-129) (bnc#931626) * CVE-2015-4105: Guest triggerable qemu MSI-X pass-through error messages (XSA-130) (bnc#931627) * CVE-2015-4106: Unmediated PCI register access in qemu (XSA-131) (bnc#931628) * CVE-2015-4163: GNTTABOP_swap_grant_ref operation misbehavior (XSA-134) (bnc#932790) * CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to host escape (XSA-135) (bnc#932770) * CVE-2015-4164: DoS through iret hypercall handler (XSA-136) (bnc#932996) The following non-security bug was fixed: * bnc#906689: let systemd schedule xencommons after network-online.target and remote-fs.target so that xendomains has access to remote shares
Patchnames: SUSE-SLE-DESKTOP-12-2015-262,SUSE-SLE-SDK-12-2015-262,SUSE-SLE-SERVER-12-2015-262
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2015-3209
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2015-4103
Affected products
Recommended 14 products, the same list as for CVE-2015-3209
Threats
Impact moderate
CVE-2015-4104
Affected products
Recommended 14 products, the same list as for CVE-2015-3209
Threats
Impact moderate
CVE-2015-4105
Affected products
Recommended 14 products, the same list as for CVE-2015-3209
Threats
Impact moderate
CVE-2015-4106
Affected products
Recommended 14 products, the same list as for CVE-2015-3209
Threats
Impact moderate
CVE-2015-4163
Affected products
Recommended 14 products, the same list as for CVE-2015-3209
Threats
Impact moderate
CVE-2015-4164
Affected products
Recommended 14 products, the same list as for CVE-2015-3209
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/906689 self
https://bugzilla.suse.com/931625 self
https://bugzilla.suse.com/931626 self
https://bugzilla.suse.com/931627 self
https://bugzilla.suse.com/931628 self
https://bugzilla.suse.com/932770 self
https://bugzilla.suse.com/932790 self
https://bugzilla.suse.com/932996 self
https://www.suse.com/security/cve/CVE-2015-3209/ self
https://www.suse.com/security/cve/CVE-2015-4103/ self
https://www.suse.com/security/cve/CVE-2015-4104/ self
https://www.suse.com/security/cve/CVE-2015-4105/ self
https://www.suse.com/security/cve/CVE-2015-4106/ self
https://www.suse.com/security/cve/CVE-2015-4163/ self
https://www.suse.com/security/cve/CVE-2015-4164/ self
https://www.suse.com/security/cve/CVE-2015-3209 external
https://bugzilla.suse.com/932267 external
https://bugzilla.suse.com/932770 external
https://bugzilla.suse.com/932823 external
https://www.suse.com/security/cve/CVE-2015-4103 external
https://bugzilla.suse.com/931625 external
https://www.suse.com/security/cve/CVE-2015-4104 external
https://bugzilla.suse.com/931626 external
https://www.suse.com/security/cve/CVE-2015-4105 external
https://bugzilla.suse.com/931627 external
https://www.suse.com/security/cve/CVE-2015-4106 external
https://bugzilla.suse.com/931628 external
https://www.suse.com/security/cve/CVE-2015-4163 external
https://bugzilla.suse.com/932790 external
https://www.suse.com/security/cve/CVE-2015-4164 external
https://bugzilla.suse.com/932996 external
https://bugzilla.suse.com/950367 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for xen",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "Xen was updated to fix seven security issues and one non-security bug.\n\nThe following vulnerabilities were fixed:\n\n* CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu (XSA-128) (bnc#931625)\n* CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests (XSA-129) (bnc#931626)\n* CVE-2015-4105: Guest triggerable qemu MSI-X pass-through error messages (XSA-130) (bnc#931627)\n* CVE-2015-4106: Unmediated PCI register access in qemu (XSA-131) (bnc#931628)\n* CVE-2015-4163: GNTTABOP_swap_grant_ref operation misbehavior (XSA-134) (bnc#932790)\n* CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to host escape (XSA-135) (bnc#932770)\n* CVE-2015-4164: DoS through iret hypercall handler (XSA-136) (bnc#932996)\n\nThe following non-security bug was fixed:\n\n* bnc#906689: let systemd schedule xencommons after network-online.target and remote-fs.target so that xendomains has access to remote shares\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-2015-262,SUSE-SLE-SDK-12-2015-262,SUSE-SLE-SERVER-12-2015-262",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1042-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2015:1042-1",
        "url": "https://www.suse.com/support/update/announcement/2015/suse-su-20151042-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2015:1042-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2015-June/001432.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 906689",
        "url": "https://bugzilla.suse.com/906689"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 931625",
        "url": "https://bugzilla.suse.com/931625"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 931626",
        "url": "https://bugzilla.suse.com/931626"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 931627",
        "url": "https://bugzilla.suse.com/931627"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 931628",
        "url": "https://bugzilla.suse.com/931628"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 932770",
        "url": "https://bugzilla.suse.com/932770"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 932790",
        "url": "https://bugzilla.suse.com/932790"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 932996",
        "url": "https://bugzilla.suse.com/932996"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-3209 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-3209/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4103 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4103/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4104 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4104/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4105 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4105/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4106 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4106/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4163 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4163/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-4164 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-4164/"
      }
    ],
    "title": "Security update for xen",
    "tracking": {
      "current_release_date": "2026-09-20T12:03:50Z",
      "generator": {
        "date": "2015-06-03T12:47:57Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2015:1042-1",
      "initial_release_date": "2015-06-03T12:47:57Z",
      "revision_history": [
        {
          "date": "2015-06-03T12:47:57Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T12:03:50Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-0:4.4.2_06-21.1.x86_64",
                "product": {
                  "name": "xen-0:4.4.2_06-21.1.x86_64",
                  "product_id": "xen-0:4.4.2_06-21.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.4.2_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen@4.4.2_06-21.1?arch=x86_64\u0026upstream=xen-0:4.4.2_06-21.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
                "product": {
                  "name": "xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
                  "product_id": "xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.4.2_06_k3.12.39_47:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-kmp-default@4.4.2_06_k3.12.39_47-21.1?arch=x86_64\u0026upstream=xen-0:4.4.2_06_k3.12.39_47-21.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-0:4.4.2_06-21.1.x86_64",
                "product": {
                  "name": "xen-libs-0:4.4.2_06-21.1.x86_64",
                  "product_id": "xen-libs-0:4.4.2_06-21.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.4.2_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-libs@4.4.2_06-21.1?arch=x86_64\u0026upstream=xen-0:4.4.2_06-21.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
                "product": {
                  "name": "xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
                  "product_id": "xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.4.2_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-libs-32bit@4.4.2_06-21.1?arch=x86_64\u0026upstream=xen-0:4.4.2_06-21.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-devel-0:4.4.2_06-21.1.x86_64",
                "product": {
                  "name": "xen-devel-0:4.4.2_06-21.1.x86_64",
                  "product_id": "xen-devel-0:4.4.2_06-21.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.4.2_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-devel@4.4.2_06-21.1?arch=x86_64\u0026upstream=xen-0:4.4.2_06-21.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-doc-html-0:4.4.2_06-21.1.x86_64",
                "product": {
                  "name": "xen-doc-html-0:4.4.2_06-21.1.x86_64",
                  "product_id": "xen-doc-html-0:4.4.2_06-21.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.4.2_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-doc-html@4.4.2_06-21.1?arch=x86_64\u0026upstream=xen-0:4.4.2_06-21.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-0:4.4.2_06-21.1.x86_64",
                "product": {
                  "name": "xen-tools-0:4.4.2_06-21.1.x86_64",
                  "product_id": "xen-tools-0:4.4.2_06-21.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.4.2_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-tools@4.4.2_06-21.1?arch=x86_64\u0026upstream=xen-0:4.4.2_06-21.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-0:4.4.2_06-21.1.x86_64",
                "product": {
                  "name": "xen-tools-domU-0:4.4.2_06-21.1.x86_64",
                  "product_id": "xen-tools-domU-0:4.4.2_06-21.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.4.2_06:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-tools-domU@4.4.2_06-21.1?arch=x86_64\u0026upstream=xen-0:4.4.2_06-21.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12",
                  "product_id": "SUSE Linux Enterprise Desktop 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12",
                  "product_id": "SUSE Linux Enterprise Server 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 12",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 12",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-0:4.4.2_06-21.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64"
        },
        "product_reference": "xen-0:4.4.2_06-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64"
        },
        "product_reference": "xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-0:4.4.2_06-21.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64"
        },
        "product_reference": "xen-libs-0:4.4.2_06-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-0:4.4.2_06-21.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
          "product_id": "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64"
        },
        "product_reference": "xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-0:4.4.2_06-21.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
        },
        "product_reference": "xen-devel-0:4.4.2_06-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-0:4.4.2_06-21.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12",
          "product_id": "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64"
        },
        "product_reference": "xen-devel-0:4.4.2_06-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-0:4.4.2_06-21.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64"
        },
        "product_reference": "xen-devel-0:4.4.2_06-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-0:4.4.2_06-21.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64"
        },
        "product_reference": "xen-0:4.4.2_06-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-html-0:4.4.2_06-21.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64"
        },
        "product_reference": "xen-doc-html-0:4.4.2_06-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64"
        },
        "product_reference": "xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-0:4.4.2_06-21.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64"
        },
        "product_reference": "xen-libs-0:4.4.2_06-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-0:4.4.2_06-21.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64"
        },
        "product_reference": "xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-0:4.4.2_06-21.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64"
        },
        "product_reference": "xen-tools-0:4.4.2_06-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-0:4.4.2_06-21.1.x86_64 as component of SUSE Linux Enterprise Server 12",
          "product_id": "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64"
        },
        "product_reference": "xen-tools-domU-0:4.4.2_06-21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-3209",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-3209"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS set.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-3209",
          "url": "https://www.suse.com/security/cve/CVE-2015-3209"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 932267 for CVE-2015-3209",
          "url": "https://bugzilla.suse.com/932267"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 932770 for CVE-2015-3209",
          "url": "https://bugzilla.suse.com/932770"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 932823 for CVE-2015-3209",
          "url": "https://bugzilla.suse.com/932823"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-03T12:47:57Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-3209"
    },
    {
      "cve": "CVE-2015-4103",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4103"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4103",
          "url": "https://www.suse.com/security/cve/CVE-2015-4103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931625 for CVE-2015-4103",
          "url": "https://bugzilla.suse.com/931625"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-03T12:47:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4103"
    },
    {
      "cve": "CVE-2015-4104",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4104"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service (unexpected interrupt and host crash) via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4104",
          "url": "https://www.suse.com/security/cve/CVE-2015-4104"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931626 for CVE-2015-4104",
          "url": "https://bugzilla.suse.com/931626"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-03T12:47:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4104"
    },
    {
      "cve": "CVE-2015-4105",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4105"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to cause a denial of service (host disk consumption) via certain invalid operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4105",
          "url": "https://www.suse.com/security/cve/CVE-2015-4105"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931627 for CVE-2015-4105",
          "url": "https://bugzilla.suse.com/931627"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-03T12:47:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4105"
    },
    {
      "cve": "CVE-2015-4106",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4106"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4106",
          "url": "https://www.suse.com/security/cve/CVE-2015-4106"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 931628 for CVE-2015-4106",
          "url": "https://bugzilla.suse.com/931628"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-03T12:47:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4106"
    },
    {
      "cve": "CVE-2015-4163",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4163"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version, which allows local guest domains to cause a denial of service (NULL pointer dereference) via a hypercall without a GNTTABOP_setup_table or GNTTABOP_set_version.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4163",
          "url": "https://www.suse.com/security/cve/CVE-2015-4163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 932790 for CVE-2015-4163",
          "url": "https://bugzilla.suse.com/932790"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-03T12:47:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4163"
    },
    {
      "cve": "CVE-2015-4164",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-4164"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV guest administrators to cause a denial of service (large loop and system hang) via a hypercall_iret call with EFLAGS.VM set.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-4164",
          "url": "https://www.suse.com/security/cve/CVE-2015-4164"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 932996 for CVE-2015-4164",
          "url": "https://bugzilla.suse.com/932996"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 950367 for CVE-2015-4164",
          "url": "https://bugzilla.suse.com/950367"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-doc-html-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-kmp-default-0:4.4.2_06_k3.12.39_47-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-libs-32bit-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 12:xen-tools-domU-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:xen-devel-0:4.4.2_06-21.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12:xen-devel-0:4.4.2_06-21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2015-06-03T12:47:57Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-4164"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.