SUSE: 2015:1479-2 Important: Xen DoS and Code Execution Issues
suse
September 2, 2015
An update that fixes 6 vulnerabilities is now available
Summary
xen was updated to fix the following security issues: * CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device model (bsc#939712, XSA-140) * CVE-2015-5166: Use after free in QEMU/Xen block unplug protocol (bsc#939709, XSA-139) * CVE-2015-2751: Certain domctl operations could have be used to lock up the host (bsc#922709, XSA-127) * CVE-2015-3259: xl command line config handling stack overflow (bsc#935634, XSA-137) * CVE-2015-4164: DoS through iret hypercall handler (bsc#932996, XSA-136) * CVE-2015-5154: Host code execution via IDE subsystem CD-ROM (bsc#938344) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Desktop 11-SP3: zypper in -t patch sledsp3-xen-12066=1
Topics Covered
References
#922709 #932996 #935634 #938344 #939709 #939712
Cross- CVE-2015-2751 CVE-2015-3259 CVE-2015-4164
CVE-2015-5154 CVE-2015-5165 CVE-2015-5166
Affected Products:
SUSE Linux Enterprise Desktop 11-SP3
https://www.suse.com/security/cve/CVE-2015-2751.html
https://www.suse.com/security/cve/CVE-2015-3259.html
https://www.suse.com/security/cve/CVE-2015-4164.html
https://www.suse.com/security/cve/CVE-2015-5154.html
https://www.suse.com/security/cve/CVE-2015-5165.html
https://www.suse.com/security/cve/CVE-2015-5166.html
https://bugzilla.suse.com/922709
https://bugzilla.suse.com/932996
https://bugzilla.suse.com/935634
https://bugzilla.suse.com/938344
https://bugzilla.suse.com/939709
https://bugzilla.suse.com/939712
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2015:1479-2
Rating: important
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!