Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

SUSE: 2021:1470-1 Critical: Xen Memory Management Updates

suse
Calendar Grey May 17, 2016
Scroller Suse
SUSE patches address various vulnerabilities in Xen, greatly improving both the safety and reliability of Linux environments.
An update that solves 45 vulnerabilities and has three An update that solves 45 vulnerabilities and has three An update that solves 45 vulnerabilities and has three fixes is now av...

Summary

xen was updated to fix 46 security issues. These security issues were fixed: - CVE-2013-4527: Buffer overflow in hw/timer/hpet.c might have allowed remote attackers to execute arbitrary code via vectors related to the number of timers (bsc#964746). - CVE-2013-4529: Buffer overflow in hw/pci/pcie_aer.c allowed remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image (bsc#964929). - CVE-2013-4530: Buffer overflow in hw/ssi/pl022.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image (bsc#964950). - CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow important SUSE Linux Enterprise

References

#954872 #956832 #957988 #958007 #958009 #958493

#958523 #958918 #959006 #959387 #959695 #960707

#960726 #960836 #960861 #960862 #961332 #961358

#961692 #962321 #962335 #962360 #962611 #962627

#962632 #962642 #962758 #963783 #963923 #964415

#964431 #964452 #964644 #964746 #964925 #964929

#964947 #964950 #965112 #965156 #965269 #965315

#965317 #967090 #967101 #968004 #969125 #969126

Cross- CVE-2013-4527 CVE-2013-4529 CVE-2013-4530

CVE-2013-4533 CVE-2013-4534 CVE-2013-4537

CVE-2013-4538 CVE-2013-4539 CVE-2014-0222

CVE-2014-3640 CVE-2014-3689 CVE-2014-7815

CVE-2014-9718 CVE-2015-1779 CVE-2015-5278

CVE-2015-6855 CVE-2015-7512 CVE-2015-7549

CVE-2015-8345 CVE-2015-8504 CVE-2015-8550

CVE-2015...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:1318-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow important SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.