Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 543
Alerts This Week
Warning Icon 1 543

SUSE: 2017:2812-1 Important: Xen Denial Of Service & Escalation

suse
Calendar Grey October 20, 2017
Dist Suse Esm H88
Addresses 8 critical vulnerabilities in xen for SUSE Linux Enterprise environments. Vital updates and security patches provided.
An update that fixes 8 vulnerabilities is now available

Summary

This update for xen fixes several issues: These security issues were fixed: - CVE-2017-5526: The ES1370 audio device emulation support was vulnerable to a memory leakage issue allowing a privileged user inside the guest to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1059777) - CVE-2017-15593: Missing cleanup in the page type system allowed a malicious or buggy PV guest to cause DoS (XSA-242 bsc#1061084) - CVE-2017-15592: A problem in the shadow pagetable code allowed a malicious or buggy HVM guest to cause DoS or cause hypervisor memory corruption potentially allowing the guest to escalate its privilege (XSA-243 bsc#1061086) - CVE-2017-15594: Problematic handling of the selector fields in the Interrupt Descriptor Table (IDT) allowed a malicious or buggy x86 PV

Topics%20covered

Topics Covered

security advisory privilege escalation DoS patch update important update SUSE Linux Enterprise Xen security

References

#1059777 #1061076 #1061080 #1061081 #1061082

#1061084 #1061086 #1061087

Cross- CVE-2017-15588 CVE-2017-15589 CVE-2017-15590

CVE-2017-15592 CVE-2017-15593 CVE-2017-15594

CVE-2017-15595 CVE-2017-5526

Affected Products:

SUSE Linux Enterprise Server 11-SP3-LTSS

SUSE Linux Enterprise Point of Sale 11-SP3

SUSE Linux Enterprise Debuginfo 11-SP3

https://www.suse.com/security/cve/CVE-2017-15588.html

https://www.suse.com/security/cve/CVE-2017-15589.html

https://www.suse.com/security/cve/CVE-2017-15590.html

https://www.suse.com/security/cve/CVE-2017-15592.html

https://www.suse.com/security/cve/CVE-2017-15593.html

https://www.suse.com/security/cve/CVE-2017-15594.html

https://www.suse.com/security/cve/CVE-2017-15595.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:2812-1
Rating: important

Topics%20covered

Topics Covered

security advisory privilege escalation DoS patch update important update SUSE Linux Enterprise Xen security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.