Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

SUSE: 2018:2037-1 Moderate: Xen Integer Overflow and DoS Fix

suse
Calendar Grey July 23, 2018
Scroller Suse
SUSE has issued a vital security update for xen, fixing multiple vulnerabilities and including essential bug fixes. Installation instructions and documentation are available.
An update that solves 5 vulnerabilities and has two fixes is now available

Summary

This update for xen fixes the following issues: Security issues fixed: - CVE-2018-12617: Fix integer overflow that causes segmentation fault in qmp_guest_file_read() with g_malloc() (bsc#1098744). - CVE-2018-3665: Fix Lazy FP Save/Restore issue (XSA-267) (bsc#1095242). - CVE-2018-11806: Fix heap buffer overflow while reassembling fragmented datagrams (bsc#1096224). - CVE-2018-12891: Fix possible Denial of Service (DoS) via certain PV MMU operations that affect the entire host (XSA-264) (bsc#1097521). - CVE-2018-12893: Fix crash/Denial of Service (DoS) via safety check (XSA-265) (bsc#1097522). Bug fixes: - bsc#1079730: Fix failed "write" lock. - bsc#1027519: Add upstream patches from January. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods

Topics%20covered

Topics Covered

security advisory DoS integer overflow SUSE Linux xen security

References

#1027519 #1079730 #1095242 #1096224 #1097521

#1097522 #1098744

Cross- CVE-2018-11806 CVE-2018-12617 CVE-2018-12891

CVE-2018-12893 CVE-2018-3665

Affected Products:

SUSE Linux Enterprise Software Development Kit 11-SP4

SUSE Linux Enterprise Server 11-SP4

SUSE Linux Enterprise Debuginfo 11-SP4

https://www.suse.com/security/cve/CVE-2018-11806.html

https://www.suse.com/security/cve/CVE-2018-12617.html

https://www.suse.com/security/cve/CVE-2018-12891.html

https://www.suse.com/security/cve/CVE-2018-12893.html

https://www.suse.com/security/cve/CVE-2018-3665.html

https://bugzilla.suse.com/1027519

https://bugzilla.suse.com/1079730

https://bugzilla.suse.com/1095242

https://bugzilla.suse.com/1096224

https://bugzilla.suse.com/1097521

Announcement ID: SUSE-SU-2018:2037-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory DoS integer overflow SUSE Linux xen security

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.