Alerts This Week
Warning Icon 1 609
Alerts This Week
Warning Icon 1 609

SUSE 10 SP4: 2015:0889-2 Important: Xen Buffer Overflow DoS

suse
Calendar Grey May 26, 2015
Dist Suse Esm H88
SUSE has released a critical security patch addressing a significant Xen buffer overflow flaw that impacts system efficiency.
An update that fixes one vulnerability is now available

Summary

Xen was updated to fix a buffer overflow in the floppy drive emulation, which could be used to carry out denial of service attacks or potential code execution against the host. This vulnerability is also known as VENOM. (CVE-2015-3456) Security Issues: * CVE-2015-3456 Package List: - SUSE Linux Enterprise Server 10 SP4 LTSS (i586 x86_64): xen-3.2.3_17040_46-0.15.1 xen-devel-3.2.3_17040_46-0.15.1 xen-doc-html-3.2.3_17040_46-0.15.1 xen-doc-pdf-3.2.3_17040_46-0.15.1 xen-doc-ps-3.2.3_17040_46-0.15.1 xen-kmp-debug-3.2.3_17040_46_2.6.16.60_0.132.1-0.15.1 xen-kmp-default-3.2.3_17040_46_2.6.16.60_0.132.1-0.15.1 xen-kmp-kdump-3.2.3_17040_46_2.6.16.60_0.132.1-0.15.1

Topics%20covered

Topics Covered

security advisory update buffer overflow SUSE deny service Xen

References

#929339

Cross- CVE-2015-3456

Affected Products:

SUSE Linux Enterprise Server 10 SP4 LTSS

https://www.suse.com/security/cve/CVE-2015-3456.html

https://bugzilla.suse.com/929339

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2015:0889-2
Rating: important

Topics%20covered

Topics Covered

security advisory update buffer overflow SUSE deny service Xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here