SUSE: 2017:1742-1 Important: Xen Privilege Escalation and DoS
suse
June 30, 2017
An update that solves two vulnerabilities and has 9 fixes An update that solves two vulnerabilities and has 9 fixes An update that solves two vulnerabilities and has 9 fixes is now...
Summary
This update for xen fixes several issues. These security issues were fixed: - Page transfer might have allowed PV guest to elevate privilege (XSA-217, bsc#1042882) - Races in the grant table unmap code allowed for informations leaks and potentially privilege escalation (XSA-218, bsc#1042893) - Insufficient reference counts during shadow emulation allowed a malicious pair of guest to elevate their privileges to the privileges that XEN runs under (XSA-219, bsc#1042915) - Missing NULL pointer check in event channel poll allows guests to DoS the host (XSA-221, bsc#1042924) - Stale P2M mappings due to insufficient error checking allowed malicious guest to leak information or elevate privileges (XSA-222, bsc#1042931) - Grant table operations mishandled reference counts allowing malicious
References
#1027519 #1035642 #1037243 #1042160 #1042882
#1042893 #1042915 #1042923 #1042924 #1042931
#1042938
Cross- CVE-2017-8309 CVE-2017-9330
Affected Products:
SUSE Linux Enterprise Software Development Kit 12-SP2
SUSE Linux Enterprise Server 12-SP2
SUSE Linux Enterprise Desktop 12-SP2
https://www.suse.com/security/cve/CVE-2017-8309.html
https://www.suse.com/security/cve/CVE-2017-9330.html
https://bugzilla.suse.com/1027519
https://bugzilla.suse.com/1035642
https://bugzilla.suse.com/1037243
https://bugzilla.suse.com/1042160
https://bugzilla.suse.com/1042882
https://bugzilla.suse.com/1042893
https://bugzilla.suse.com/1042915
https://bugzilla.suse.com/1042923
https://bugzilla.suse.com/1042924
https://bugzilla.suse.com/1042931
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2017:1742-1
Rating: important
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!