Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

SUSE Linux Enterprise 12-SP3: SUSE-SU-2018:4070-1 Urgent: DoS Flaw

suse
Calendar Grey December 12, 2018
Dist Suse Esm H88
SUSE updates for xen address important vulnerabilities, providing details on installation instructions and fixes.
An update that solves 6 vulnerabilities and has one errata is now available

Summary

This update for xen fixes the following issues: Security issues fixed: - CVE-2018-18849: Fixed an out of bounds memory access issue was found in the LSI53C895A SCSI Host Bus Adapter emulation while writing a message in lsi_do_msgin (bsc#1114423). - CVE-2018-18883: Fixed a NULL pointer dereference that could have been triggered by nested VT-x that where not properly restricted (XSA-278)(bsc#1114405). - CVE-2018-19965: Fixed denial of service issue from attempting to use INVPCID with a non-canonical addresses (XSA-279)(bsc#1115045). - CVE-2018-19966: Fixed issue introduced by XSA-240 that could have caused conflicts with shadow paging (XSA-280)(bsc#1115047). - CVE-2018-19961 CVE-2018-19962: Fixed insufficient TLB flushing / improper large page mappings with AMD IOMMUs (XSA-275)(bsc#1115040).

Topics%20covered

Topics Covered

security advisory denial of service important memory access bug fixes xen SUSE Linux Enterprise

References

#1027519 #1108940 #1114405 #1114423 #1115040

#1115045 #1115047

Cross- CVE-2018-18849 CVE-2018-18883 CVE-2018-19961

CVE-2018-19962 CVE-2018-19965 CVE-2018-19966

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP3

SUSE Linux Enterprise Server 12-SP3

SUSE Linux Enterprise Desktop 12-SP3

SUSE CaaS Platform ALL

SUSE CaaS Platform 3.0

https://www.suse.com/security/cve/CVE-2018-18849.html

https://www.suse.com/security/cve/CVE-2018-18883.html

https://www.suse.com/security/cve/CVE-2018-19961.html

https://www.suse.com/security/cve/CVE-2018-19962.html

https://www.suse.com/security/cve/CVE-2018-19965.html

https://www.suse.com/security/cve/CVE-2018-19966.html

https://bugzilla.suse.com/1027519

https://bugzilla.suse.com/1108940

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2018:4070-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service important memory access bug fixes xen SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here