Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

SUSE 10 SP4: 2015:0889-2 Important: Xen Buffer Overflow DoS

suse
Calendar Grey May 26, 2015
Scroller Suse
SUSE has released a critical security patch addressing a significant Xen buffer overflow flaw that impacts system efficiency.
An update that fixes one vulnerability is now available

Summary

Xen was updated to fix a buffer overflow in the floppy drive emulation, which could be used to carry out denial of service attacks or potential code execution against the host. This vulnerability is also known as VENOM. (CVE-2015-3456) Security Issues: * CVE-2015-3456 Package List: - SUSE Linux Enterprise Server 10 SP4 LTSS (i586 x86_64): xen-3.2.3_17040_46-0.15.1 xen-devel-3.2.3_17040_46-0.15.1 xen-doc-html-3.2.3_17040_46-0.15.1 xen-doc-pdf-3.2.3_17040_46-0.15.1 xen-doc-ps-3.2.3_17040_46-0.15.1 xen-kmp-debug-3.2.3_17040_46_2.6.16.60_0.132.1-0.15.1 xen-kmp-default-3.2.3_17040_46_2.6.16.60_0.132.1-0.15.1 xen-kmp-kdump-3.2.3_17040_46_2.6.16.60_0.132.1-0.15.1

Topics%20covered

Topics Covered

security advisory update buffer overflow SUSE deny service Xen

References

#929339

Cross- CVE-2015-3456

Affected Products:

SUSE Linux Enterprise Server 10 SP4 LTSS

https://www.suse.com/security/cve/CVE-2015-3456.html

https://bugzilla.suse.com/929339

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2015:0889-2
Rating: important

Topics%20covered

Topics Covered

security advisory update buffer overflow SUSE deny service Xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.