Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

SUSE: 2023:1104-1 Critical: Kernel Memory Flaw And Security Threat

suse
Calendar Grey July 8, 2015
Dist Suse Esm H88
SUSE Security Patch addresses critical vulnerabilities in Xen, notably Denial of Service and heap overflow risks. Key update information provided.
An update that fixes two vulnerabilities is now available

Summary

Xen was updated to fix two security issues: * CVE-2015-3209: Heap overflow in qemu pcnet controller allowing guest to host escape. (XSA-135, bsc#932770) * CVE-2015-4164: DoS through iret hypercall handler. (XSA-136, bsc#932996) Security Issues: * CVE-2015-4164 * CVE-2015-3209

Topics%20covered

Topics Covered

security advisory update DoS important heap overflow SUSE Xen

References

#932770 #932996

Cross- CVE-2015-3209 CVE-2015-4164

Affected Products:

SUSE Linux Enterprise Server 10 SP4 LTSS

https://www.suse.com/security/cve/CVE-2015-3209.html

https://www.suse.com/security/cve/CVE-2015-4164.html

https://bugzilla.suse.com/932770

https://bugzilla.suse.com/932996

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2015:1206-1
Rating: important

Topics%20covered

Topics Covered

security advisory update DoS important heap overflow SUSE Xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here