csaf_suse - suse-su-2023:4184-1

Vulnerability from csaf_suse

Published

2023-10-24 14:52

Modified

2023-10-24 14:52

Summary

Security update for xen

Notes

Title of the patch

Security update for xen

Description of the patch

This update for xen fixes the following issues: - CVE-2023-34323: Fixed a potential crash in C Xenstored due to an incorrect assertion (XSA-440) (bsc#1215744). - CVE-2023-34326: Fixed a missing IOMMU TLB flush on x86 AMD systems with IOMMU hardware and PCI passthrough enabled (XSA-442) (bsc#1215746). - CVE-2023-34325: Fixed multiple parsing issues in libfsimage (XSA-443) (bsc#1215747). - CVE-2023-34327, CVE-2023-34328: Fixed multiple issues with AMD x86 debugging functionality for guests (XSA-444) (bsc#1215748).

Patchnames

SUSE-2023-4184,SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4184,SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4184,SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4184

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for xen",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for xen fixes the following issues:\n\n- CVE-2023-34323: Fixed a potential crash in C Xenstored due to an\n  incorrect assertion (XSA-440) (bsc#1215744).\n- CVE-2023-34326: Fixed a missing IOMMU TLB flush on x86 AMD systems\n  with IOMMU hardware and PCI passthrough enabled (XSA-442)\n  (bsc#1215746).\n- CVE-2023-34325: Fixed multiple parsing issues in libfsimage\n  (XSA-443) (bsc#1215747).\n- CVE-2023-34327, CVE-2023-34328: Fixed multiple issues with AMD x86\n  debugging functionality for guests (XSA-444) (bsc#1215748).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2023-4184,SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4184,SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4184,SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4184",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_4184-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2023:4184-1",
            url: "https://www.suse.com/support/update/announcement/2023/suse-su-20234184-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2023:4184-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2023-October/016830.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1215744",
            url: "https://bugzilla.suse.com/1215744",
         },
         {
            category: "self",
            summary: "SUSE Bug 1215746",
            url: "https://bugzilla.suse.com/1215746",
         },
         {
            category: "self",
            summary: "SUSE Bug 1215747",
            url: "https://bugzilla.suse.com/1215747",
         },
         {
            category: "self",
            summary: "SUSE Bug 1215748",
            url: "https://bugzilla.suse.com/1215748",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-34323 page",
            url: "https://www.suse.com/security/cve/CVE-2023-34323/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-34325 page",
            url: "https://www.suse.com/security/cve/CVE-2023-34325/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-34326 page",
            url: "https://www.suse.com/security/cve/CVE-2023-34326/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-34327 page",
            url: "https://www.suse.com/security/cve/CVE-2023-34327/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-34328 page",
            url: "https://www.suse.com/security/cve/CVE-2023-34328/",
         },
      ],
      title: "Security update for xen",
      tracking: {
         current_release_date: "2023-10-24T14:52:50Z",
         generator: {
            date: "2023-10-24T14:52:50Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2023:4184-1",
         initial_release_date: "2023-10-24T14:52:50Z",
         revision_history: [
            {
               date: "2023-10-24T14:52:50Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "xen-4.12.4_40-150100.3.95.1.aarch64",
                        product: {
                           name: "xen-4.12.4_40-150100.3.95.1.aarch64",
                           product_id: "xen-4.12.4_40-150100.3.95.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-devel-4.12.4_40-150100.3.95.1.aarch64",
                        product: {
                           name: "xen-devel-4.12.4_40-150100.3.95.1.aarch64",
                           product_id: "xen-devel-4.12.4_40-150100.3.95.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-doc-html-4.12.4_40-150100.3.95.1.aarch64",
                        product: {
                           name: "xen-doc-html-4.12.4_40-150100.3.95.1.aarch64",
                           product_id: "xen-doc-html-4.12.4_40-150100.3.95.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-libs-4.12.4_40-150100.3.95.1.aarch64",
                        product: {
                           name: "xen-libs-4.12.4_40-150100.3.95.1.aarch64",
                           product_id: "xen-libs-4.12.4_40-150100.3.95.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-4.12.4_40-150100.3.95.1.aarch64",
                        product: {
                           name: "xen-tools-4.12.4_40-150100.3.95.1.aarch64",
                           product_id: "xen-tools-4.12.4_40-150100.3.95.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-domU-4.12.4_40-150100.3.95.1.aarch64",
                        product: {
                           name: "xen-tools-domU-4.12.4_40-150100.3.95.1.aarch64",
                           product_id: "xen-tools-domU-4.12.4_40-150100.3.95.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "xen-libs-64bit-4.12.4_40-150100.3.95.1.aarch64_ilp32",
                        product: {
                           name: "xen-libs-64bit-4.12.4_40-150100.3.95.1.aarch64_ilp32",
                           product_id: "xen-libs-64bit-4.12.4_40-150100.3.95.1.aarch64_ilp32",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64_ilp32",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "xen-devel-4.12.4_40-150100.3.95.1.i586",
                        product: {
                           name: "xen-devel-4.12.4_40-150100.3.95.1.i586",
                           product_id: "xen-devel-4.12.4_40-150100.3.95.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-libs-4.12.4_40-150100.3.95.1.i586",
                        product: {
                           name: "xen-libs-4.12.4_40-150100.3.95.1.i586",
                           product_id: "xen-libs-4.12.4_40-150100.3.95.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-domU-4.12.4_40-150100.3.95.1.i586",
                        product: {
                           name: "xen-tools-domU-4.12.4_40-150100.3.95.1.i586",
                           product_id: "xen-tools-domU-4.12.4_40-150100.3.95.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "xen-4.12.4_40-150100.3.95.1.x86_64",
                        product: {
                           name: "xen-4.12.4_40-150100.3.95.1.x86_64",
                           product_id: "xen-4.12.4_40-150100.3.95.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                        product: {
                           name: "xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                           product_id: "xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-doc-html-4.12.4_40-150100.3.95.1.x86_64",
                        product: {
                           name: "xen-doc-html-4.12.4_40-150100.3.95.1.x86_64",
                           product_id: "xen-doc-html-4.12.4_40-150100.3.95.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                        product: {
                           name: "xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                           product_id: "xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-libs-32bit-4.12.4_40-150100.3.95.1.x86_64",
                        product: {
                           name: "xen-libs-32bit-4.12.4_40-150100.3.95.1.x86_64",
                           product_id: "xen-libs-32bit-4.12.4_40-150100.3.95.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                        product: {
                           name: "xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                           product_id: "xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                        product: {
                           name: "xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                           product_id: "xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-ltss:15:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 15 SP1-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 15 SP1-LTSS",
                           product_id: "SUSE Linux Enterprise Server 15 SP1-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:15:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:15:sp1",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-devel-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-devel-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-libs-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-libs-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-tools-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-devel-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-devel-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-libs-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-libs-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-tools-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-devel-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-devel-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-libs-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-libs-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-tools-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
            },
            product_reference: "xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-34323",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-34323",
            },
         ],
         notes: [
            {
               category: "general",
               text: "When a transaction is committed, C Xenstored will first check\nthe quota is correct before attempting to commit any nodes.  It would\nbe possible that accounting is temporarily negative if a node has\nbeen removed outside of the transaction.\n\nUnfortunately, some versions of C Xenstored are assuming that the\nquota cannot be negative and are using assert() to confirm it.  This\nwill lead to C Xenstored crash when tools are built without -DNDEBUG\n(this is the default).\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-34323",
               url: "https://www.suse.com/security/cve/CVE-2023-34323",
            },
            {
               category: "external",
               summary: "SUSE Bug 1215744 for CVE-2023-34323",
               url: "https://bugzilla.suse.com/1215744",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-10-24T14:52:50Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-34323",
      },
      {
         cve: "CVE-2023-34325",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-34325",
            },
         ],
         notes: [
            {
               category: "general",
               text: "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nlibfsimage contains parsing code for several filesystems, most of them based on\ngrub-legacy code.  libfsimage is used by pygrub to inspect guest disks.\n\nPygrub runs as the same user as the toolstack (root in a priviledged domain).\n\nAt least one issue has been reported to the Xen Security Team that allows an\nattacker to trigger a stack buffer overflow in libfsimage.  After further\nanalisys the Xen Security Team is no longer confident in the suitability of\nlibfsimage when run against guest controlled input with super user priviledges.\n\nIn order to not affect current deployments that rely on pygrub patches are\nprovided in the resolution section of the advisory that allow running pygrub in\ndeprivileged mode.\n\nCVE-2023-4949 refers to the original issue in the upstream grub\nproject (\"An attacker with local access to a system (either through a\ndisk or external drive) can present a modified XFS partition to\ngrub-legacy in such a way to exploit a memory corruption in grub's XFS\nfile system implementation.\")  CVE-2023-34325 refers specifically to\nthe vulnerabilities in Xen's copy of libfsimage, which is decended\nfrom a very old version of grub.\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-34325",
               url: "https://www.suse.com/security/cve/CVE-2023-34325",
            },
            {
               category: "external",
               summary: "SUSE Bug 1215747 for CVE-2023-34325",
               url: "https://bugzilla.suse.com/1215747",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-10-24T14:52:50Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-34325",
      },
      {
         cve: "CVE-2023-34326",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-34326",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The caching invalidation guidelines from the AMD-Vi specification (48882—Rev\n3.07-PUB—Oct 2022) is incorrect on some hardware, as devices will malfunction\n(see stale DMA mappings) if some fields of the DTE are updated but the IOMMU\nTLB is not flushed.\n\nSuch stale DMA mappings can point to memory ranges not owned by the guest, thus\nallowing access to unindented memory regions.\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-34326",
               url: "https://www.suse.com/security/cve/CVE-2023-34326",
            },
            {
               category: "external",
               summary: "SUSE Bug 1215145 for CVE-2023-34326",
               url: "https://bugzilla.suse.com/1215145",
            },
            {
               category: "external",
               summary: "SUSE Bug 1215746 for CVE-2023-34326",
               url: "https://bugzilla.suse.com/1215746",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-10-24T14:52:50Z",
               details: "important",
            },
         ],
         title: "CVE-2023-34326",
      },
      {
         cve: "CVE-2023-34327",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-34327",
            },
         ],
         notes: [
            {
               category: "general",
               text: "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nAMD CPUs since ~2014 have extensions to normal x86 debugging functionality.\nXen supports guests using these extensions.\n\nUnfortunately there are errors in Xen's handling of the guest state, leading\nto denials of service.\n\n 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of\n    a previous vCPUs debug mask state.\n\n 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.\n    This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock\n    up the CPU entirely.\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-34327",
               url: "https://www.suse.com/security/cve/CVE-2023-34327",
            },
            {
               category: "external",
               summary: "SUSE Bug 1215748 for CVE-2023-34327",
               url: "https://bugzilla.suse.com/1215748",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-10-24T14:52:50Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-34327",
      },
      {
         cve: "CVE-2023-34328",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-34328",
            },
         ],
         notes: [
            {
               category: "general",
               text: "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nAMD CPUs since ~2014 have extensions to normal x86 debugging functionality.\nXen supports guests using these extensions.\n\nUnfortunately there are errors in Xen's handling of the guest state, leading\nto denials of service.\n\n 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of\n    a previous vCPUs debug mask state.\n\n 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.\n    This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock\n    up the CPU entirely.\n",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-34328",
               url: "https://www.suse.com/security/cve/CVE-2023-34328",
            },
            {
               category: "external",
               summary: "SUSE Bug 1215748 for CVE-2023-34328",
               url: "https://bugzilla.suse.com/1215748",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP1-LTSS:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-devel-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-libs-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-4.12.4_40-150100.3.95.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP1:xen-tools-domU-4.12.4_40-150100.3.95.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2023-10-24T14:52:50Z",
               details: "moderate",
            },
         ],
         title: "CVE-2023-34328",
      },
   ],
}

cve-2023-34328

Vulnerability from cvelistv5

Published

2024-01-05 16:34

Modified

2024-08-02 16:10

Severity ?

Summary

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-444.html

Impacted products

	Vendor	Product	Version
	Xen	Xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T16:10:06.394Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-444.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-444",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "Only AMD/Hygon hardware supporting the DBEXT feature are vulnerable.\nThis is believed to be the Steamroller microarchitecture and later.\n\nFor CVE-2023-34327, Xen versions 4.5 and later are vulnerable.\n\nFor CVE-2023-34328, Xen version between 4.5 and 4.13 are vulnerable.\nThe issue is benign in Xen 4.14 and later owing to an unrelated change.\n",
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "This issue was discovered by Andrew Cooper of XenServer.\n",
            },
         ],
         datePublic: "2023-10-10T12:00:00Z",
         descriptions: [
            {
               lang: "en",
               value: "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nAMD CPUs since ~2014 have extensions to normal x86 debugging functionality.\nXen supports guests using these extensions.\n\nUnfortunately there are errors in Xen's handling of the guest state, leading\nto denials of service.\n\n 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of\n    a previous vCPUs debug mask state.\n\n 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.\n    This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock\n    up the CPU entirely.\n",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "For CVE-2023-34327, any guest (PV or HVM) using Debug Masks normally for\nit's own purposes can cause incorrect behaviour in an unrelated HVM\nvCPU, most likely resulting in a guest crash.\n\nFor CVE-2023-34328, a buggy or malicious PV guest kernel can lock up the\nhost.\n",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-05T16:34:11.100Z",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               url: "https://xenbits.xenproject.org/xsa/advisory-444.html",
            },
         ],
         title: "x86/AMD: Debug Mask handling",
         workarounds: [
            {
               lang: "en",
               value: "For CVE-2023-34327, HVM VMs which can see the DBEXT feature are not\nsusceptible to running in the wrong state.  By default, VMs will see the\nDBEXT feature on capable hardware, and when not explicitly levelled for\nmigration compatibility.\n\nFor CVE-2023-34328, PV VMs which cannot see the DBEXT feature cannot\nleverage the vulnerability.\n",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2023-34328",
      datePublished: "2024-01-05T16:34:11.100Z",
      dateReserved: "2023-06-01T10:44:17.066Z",
      dateUpdated: "2024-08-02T16:10:06.394Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-34327

Vulnerability from cvelistv5

Published

2024-01-05 16:34

Modified

2024-08-02 16:10

Severity ?

Summary

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-444.html

Impacted products

	Vendor	Product	Version
	Xen	Xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T16:10:06.637Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-444.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-444",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "Only AMD/Hygon hardware supporting the DBEXT feature are vulnerable.\nThis is believed to be the Steamroller microarchitecture and later.\n\nFor CVE-2023-34327, Xen versions 4.5 and later are vulnerable.\n\nFor CVE-2023-34328, Xen version between 4.5 and 4.13 are vulnerable.\nThe issue is benign in Xen 4.14 and later owing to an unrelated change.\n",
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "This issue was discovered by Andrew Cooper of XenServer.\n",
            },
         ],
         datePublic: "2023-10-10T12:00:00Z",
         descriptions: [
            {
               lang: "en",
               value: "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nAMD CPUs since ~2014 have extensions to normal x86 debugging functionality.\nXen supports guests using these extensions.\n\nUnfortunately there are errors in Xen's handling of the guest state, leading\nto denials of service.\n\n 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of\n    a previous vCPUs debug mask state.\n\n 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.\n    This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock\n    up the CPU entirely.\n",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "For CVE-2023-34327, any guest (PV or HVM) using Debug Masks normally for\nit's own purposes can cause incorrect behaviour in an unrelated HVM\nvCPU, most likely resulting in a guest crash.\n\nFor CVE-2023-34328, a buggy or malicious PV guest kernel can lock up the\nhost.\n",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-05T16:34:10.958Z",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               url: "https://xenbits.xenproject.org/xsa/advisory-444.html",
            },
         ],
         title: "x86/AMD: Debug Mask handling",
         workarounds: [
            {
               lang: "en",
               value: "For CVE-2023-34327, HVM VMs which can see the DBEXT feature are not\nsusceptible to running in the wrong state.  By default, VMs will see the\nDBEXT feature on capable hardware, and when not explicitly levelled for\nmigration compatibility.\n\nFor CVE-2023-34328, PV VMs which cannot see the DBEXT feature cannot\nleverage the vulnerability.\n",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2023-34327",
      datePublished: "2024-01-05T16:34:10.958Z",
      dateReserved: "2023-06-01T10:44:17.066Z",
      dateUpdated: "2024-08-02T16:10:06.637Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-34326

Vulnerability from cvelistv5

Published

2024-01-05 16:30

Modified

2024-08-02 16:10

Severity ?

Summary

The caching invalidation guidelines from the AMD-Vi specification (48882—Rev 3.07-PUB—Oct 2022) is incorrect on some hardware, as devices will malfunction (see stale DMA mappings) if some fields of the DTE are updated but the IOMMU TLB is not flushed. Such stale DMA mappings can point to memory ranges not owned by the guest, thus allowing access to unindented memory regions.

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-442.html

Impacted products

	Vendor	Product	Version
	Xen	Xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T16:10:06.955Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-442.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-442",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "All Xen versions supporting PCI passthrough are affected.\n\nOnly x86 AMD systems with IOMMU hardware are vulnerable.\n\nOnly x86 guests which have physical devices passed through to them can\nleverage the vulnerability.\n",
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "This issue was discovered by Roger Pau Monné of XenServer.\n",
            },
         ],
         datePublic: "2023-10-10T11:26:00Z",
         descriptions: [
            {
               lang: "en",
               value: "The caching invalidation guidelines from the AMD-Vi specification (48882—Rev\n3.07-PUB—Oct 2022) is incorrect on some hardware, as devices will malfunction\n(see stale DMA mappings) if some fields of the DTE are updated but the IOMMU\nTLB is not flushed.\n\nSuch stale DMA mappings can point to memory ranges not owned by the guest, thus\nallowing access to unindented memory regions.\n",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "Privilege escalation, Denial of Service (DoS) affecting the entire host,\nand information leaks.\n",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-05T16:30:57.225Z",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               url: "https://xenbits.xenproject.org/xsa/advisory-442.html",
            },
         ],
         title: "x86/AMD: missing IOMMU TLB flushing",
         workarounds: [
            {
               lang: "en",
               value: "Not passing through physical devices to guests will avoid the vulnerability.\n",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2023-34326",
      datePublished: "2024-01-05T16:30:57.225Z",
      dateReserved: "2023-06-01T10:44:17.065Z",
      dateUpdated: "2024-08-02T16:10:06.955Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-34323

Vulnerability from cvelistv5

Published

2024-01-05 16:30

Modified

2024-08-02 16:10

Severity ?

Summary

When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes. It would be possible that accounting is temporarily negative if a node has been removed outside of the transaction. Unfortunately, some versions of C Xenstored are assuming that the quota cannot be negative and are using assert() to confirm it. This will lead to C Xenstored crash when tools are built without -DNDEBUG (this is the default).

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-440.html

Impacted products

	Vendor	Product	Version
	Xen	Xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T16:10:06.813Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-440.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-440",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "All versions of Xen up to and including 4.17 are vulnerable if XSA-326\nwas ingested.\n\nAll Xen systems using C Xenstored are vulnerable.  C Xenstored built\nusing -DNDEBUG (can be specified via EXTRA_CFLAGS_XEN_TOOLS=-DNDEBUG)\nare not vulnerable.  Systems using the OCaml variant of Xenstored are\nnot vulnerable.\n",
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "This issue was discovered by Stanislav Uschakow and Julien Grall, all\nfrom Amazon.\n",
            },
         ],
         datePublic: "2023-10-10T11:26:00Z",
         descriptions: [
            {
               lang: "en",
               value: "When a transaction is committed, C Xenstored will first check\nthe quota is correct before attempting to commit any nodes.  It would\nbe possible that accounting is temporarily negative if a node has\nbeen removed outside of the transaction.\n\nUnfortunately, some versions of C Xenstored are assuming that the\nquota cannot be negative and are using assert() to confirm it.  This\nwill lead to C Xenstored crash when tools are built without -DNDEBUG\n(this is the default).\n",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "A malicious guest could craft a transaction that will hit the C\nXenstored bug and crash it.  This will result to the inability to\nperform any further domain administration like starting new guests,\nor adding/removing resources to or from any existing guest.\n",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-05T16:30:32.305Z",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               url: "https://xenbits.xenproject.org/xsa/advisory-440.html",
            },
         ],
         title: "xenstored: A transaction conflict can crash C Xenstored",
         workarounds: [
            {
               lang: "en",
               value: "The problem can be avoided by using OCaml Xenstored variant.\n",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2023-34323",
      datePublished: "2024-01-05T16:30:32.305Z",
      dateReserved: "2023-06-01T10:44:17.065Z",
      dateUpdated: "2024-08-02T16:10:06.813Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-34325

Vulnerability from cvelistv5

Published

2024-01-05 16:31

Modified

2024-08-02 16:10

Severity ?

Summary

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] libfsimage contains parsing code for several filesystems, most of them based on grub-legacy code. libfsimage is used by pygrub to inspect guest disks. Pygrub runs as the same user as the toolstack (root in a priviledged domain). At least one issue has been reported to the Xen Security Team that allows an attacker to trigger a stack buffer overflow in libfsimage. After further analisys the Xen Security Team is no longer confident in the suitability of libfsimage when run against guest controlled input with super user priviledges. In order to not affect current deployments that rely on pygrub patches are provided in the resolution section of the advisory that allow running pygrub in deprivileged mode. CVE-2023-4949 refers to the original issue in the upstream grub project ("An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.") CVE-2023-34325 refers specifically to the vulnerabilities in Xen's copy of libfsimage, which is decended from a very old version of grub.

References

▼	URL	Tags
	https://xenbits.xenproject.org/xsa/advisory-443.html

Impacted products

	Vendor	Product	Version
	Xen	Xen

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T16:10:06.291Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://xenbits.xenproject.org/xsa/advisory-443.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unknown",
               product: "Xen",
               vendor: "Xen",
               versions: [
                  {
                     status: "unknown",
                     version: "consult Xen advisory XSA-443",
                  },
               ],
            },
         ],
         configurations: [
            {
               lang: "en",
               value: "All Xen versions are affected.\n",
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "This issue was discovered by Ferdinand Nölscher of Google.\n",
            },
         ],
         datePublic: "2023-10-10T12:00:00Z",
         descriptions: [
            {
               lang: "en",
               value: "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nlibfsimage contains parsing code for several filesystems, most of them based on\ngrub-legacy code.  libfsimage is used by pygrub to inspect guest disks.\n\nPygrub runs as the same user as the toolstack (root in a priviledged domain).\n\nAt least one issue has been reported to the Xen Security Team that allows an\nattacker to trigger a stack buffer overflow in libfsimage.  After further\nanalisys the Xen Security Team is no longer confident in the suitability of\nlibfsimage when run against guest controlled input with super user priviledges.\n\nIn order to not affect current deployments that rely on pygrub patches are\nprovided in the resolution section of the advisory that allow running pygrub in\ndeprivileged mode.\n\nCVE-2023-4949 refers to the original issue in the upstream grub\nproject (\"An attacker with local access to a system (either through a\ndisk or external drive) can present a modified XFS partition to\ngrub-legacy in such a way to exploit a memory corruption in grub’s XFS\nfile system implementation.\")  CVE-2023-34325 refers specifically to\nthe vulnerabilities in Xen's copy of libfsimage, which is decended\nfrom a very old version of grub.\n",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "A guest using pygrub can escalate its privilege to that of the domain\nconstruction tools (i.e., normally, to control of the host).\n",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-05T16:31:09.660Z",
            orgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
            shortName: "XEN",
         },
         references: [
            {
               url: "https://xenbits.xenproject.org/xsa/advisory-443.html",
            },
         ],
         title: "Multiple vulnerabilities in libfsimage disk handling",
         workarounds: [
            {
               lang: "en",
               value: "Ensuring that guests do not use the pygrub bootloader will avoid this\nvulnerability.\n\nFor cases where the PV guest is known to be 64bit, and uses grub2 as a\nbootloader, pvgrub is a suitable alternative pygrub.\n\nRunning only HVM guests will avoid the vulnerability.\n",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "23aa2041-22e1-471f-9209-9b7396fa234f",
      assignerShortName: "XEN",
      cveId: "CVE-2023-34325",
      datePublished: "2024-01-05T16:31:09.660Z",
      dateReserved: "2023-06-01T10:44:17.065Z",
      dateUpdated: "2024-08-02T16:10:06.291Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

cve-2023-34328

Vulnerability from cvelistv5

cve-2023-34327

Vulnerability from cvelistv5

cve-2023-34326

Vulnerability from cvelistv5

cve-2023-34323

Vulnerability from cvelistv5

cve-2023-34325

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature