Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

SUSE: 2018:2069-1 Moderate: Resolution for Xen Denial Of Service Issue

suse
Calendar Grey July 26, 2018
Scroller Suse
SUSE releases patches for Xen addressing 5 vulnerabilities, comprising DoS and integer overflow flaws. Ensure system integrity by implementing these updates.
An update that solves 5 vulnerabilities and has two fixes is now available

Summary

This update for xen fixes the following issues: Security issues fixed: - CVE-2018-12617: Fix integer overflow that causes segmentation fault in qmp_guest_file_read() with g_malloc() (bsc#1098744). - CVE-2018-3665: Fix Lazy FP Save/Restore issue (XSA-267) (bsc#1095242). - CVE-2018-11806: Fix heap buffer overflow while reassembling fragmented datagrams (bsc#1096224). - CVE-2018-12891: Fix possible Denial of Service (DoS) via certain PV MMU operations that affect the entire host (XSA-264) (bsc#1097521). - CVE-2018-12893: Fix crash/Denial of Service (DoS) via safety check (XSA-265) (bsc#1097522). Bug fixes: - bsc#1079730: Fix failed "write" lock. - bsc#1027519: Add upstream patches from January. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods

Topics%20covered

Topics Covered

security advisory moderate heap overflow integer overflow Denial of Service SUSE xen

References

#1027519 #1079730 #1095242 #1096224 #1097521

#1097522 #1098744

Cross- CVE-2018-11806 CVE-2018-12617 CVE-2018-12891

CVE-2018-12893 CVE-2018-3665

Affected Products:

SUSE Linux Enterprise Server for SAP 12-SP1

SUSE Linux Enterprise Server 12-SP1-LTSS

https://www.suse.com/security/cve/CVE-2018-11806.html

https://www.suse.com/security/cve/CVE-2018-12617.html

https://www.suse.com/security/cve/CVE-2018-12891.html

https://www.suse.com/security/cve/CVE-2018-12893.html

https://www.suse.com/security/cve/CVE-2018-3665.html

https://bugzilla.suse.com/1027519

https://bugzilla.suse.com/1079730

https://bugzilla.suse.com/1095242

https://bugzilla.suse.com/1096224

https://bugzilla.suse.com/1097521

https://bugzilla.suse.com/1097522

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2018:2069-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate heap overflow integer overflow Denial of Service SUSE xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.