Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

UBUNTU: 2020:1234-2 Urgent: Security Vulnerabilities in Kernel Code

suse
Calendar Grey December 1, 2017
Dist Suse Esm H88
Important announcement from SUSE tackling various vulnerabilities in xen, aimed at improving both security and system reliability. Find out more!
An update that solves two vulnerabilities and has four An update that solves two vulnerabilities and has four An update that solves two vulnerabilities and has four fixes is now av...

Summary

This update for xen to version 4.7.4 (bsc#1027519) fixes several issues. This new feature was added: - Support migration of HVM domains larger than 1 TB These security issues were fixed: - bsc#1068187: Failure to recognize errors in the Populate on Demand (PoD) code allowed for DoS (XSA-246) - bsc#1068191: Missing p2m error checking in PoD code allowed unprivileged guests to retain a writable mapping of freed memory leading to information leaks, privilege escalation or DoS (XSA-247). - CVE-2017-15289: The mode4and5 write functions allowed local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation (bsc#1063123) - CVE-2017-15597: A grant copy operation being done on a grant of a dying

References

#1027519 #1055047 #1061075 #1063123 #1068187

#1068191

Cross- CVE-2017-15289 CVE-2017-15597

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP2

SUSE Linux Enterprise Server 12-SP2

SUSE Linux Enterprise Desktop 12-SP2

https://www.suse.com/security/cve/CVE-2017-15289.html

https://www.suse.com/security/cve/CVE-2017-15597.html

https://bugzilla.suse.com/1027519

https://bugzilla.suse.com/1055047

https://bugzilla.suse.com/1061075

https://bugzilla.suse.com/1063123

https://bugzilla.suse.com/1068187

https://bugzilla.suse.com/1068191

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:3178-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here