Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 526
Alerts This Week
Warning Icon 1 526

SUSE: 2017:1715-1 Important Update For Xen Privilege Escalation

suse
Calendar Grey June 29, 2017
Dist Suse Esm H88
Canonical released a critical patch for Ubuntu targeting four major vulnerabilities via improved solutions and updates.
An update that solves three vulnerabilities and has 6 fixes An update that solves three vulnerabilities and has 6 fixes An update that solves three vulnerabilities and has 6 fixes ...

Summary

This update for xen fixes the following security issues: - blkif responses leaked backend stack data, which allowed unprivileged guest to obtain sensitive information from the host or other guests (XSA-216, bsc#1042863) - Page transfer might have allowed PV guest to elevate privilege (XSA-217, bsc#1042882) - Races in the grant table unmap code allowed for informations leaks and potentially privilege escalation (XSA-218, bsc#1042893) - Insufficient reference counts during shadow emulation allowed a malicious pair of guest to elevate their privileges to the privileges that XEN runs under (XSA-219, bsc#1042915) - Stale P2M mappings due to insufficient error checking allowed malicious guest to leak information or elevate privileges (XSA-222, bsc#1042931)

Topics%20covered

Topics Covered

security advisory denial of service privilege escalation important SUSE Linux Enterprise

References

#1034845 #1037243 #1042160 #1042863 #1042882

#1042893 #1042915 #1042931 #1042938

Cross- CVE-2017-8309 CVE-2017-8905 CVE-2017-9330

Affected Products:

SUSE Linux Enterprise Server 11-SP3-LTSS

SUSE Linux Enterprise Point of Sale 11-SP3

SUSE Linux Enterprise Debuginfo 11-SP3

https://www.suse.com/security/cve/CVE-2017-8309.html

https://www.suse.com/security/cve/CVE-2017-8905.html

https://www.suse.com/security/cve/CVE-2017-9330.html

https://bugzilla.suse.com/1034845

https://bugzilla.suse.com/1037243

https://bugzilla.suse.com/1042160

https://bugzilla.suse.com/1042863

https://bugzilla.suse.com/1042882

https://bugzilla.suse.com/1042893

https://bugzilla.suse.com/1042915

https://bugzilla.suse.com/1042931

https://bugzilla.suse.com/1042938

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:1715-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service privilege escalation important SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.