SUSE: 2019:0921-1 Important: Xen DoS and Escalation Threats
suse
April 10, 2019
An update that solves three vulnerabilities and has 9 fixes is now available
Summary
This update for xen fixes the following issues: Security issues fixed: - Fixed an issue which could allow malicious PV guests may cause a host crash or gain access to data pertaining to other guests.Additionally, vulnerable configurations are likely to be unstable even in the absence of an attack (bsc#1126198). - Fixed multiple access violations introduced by XENMEM_exchange hypercall which could allow a single PV guest to leak arbitrary amounts of memory, leading to a denial of service (bsc#1126192). - Fixed an issue which could allow a malicious unprivileged guest userspace process to escalate its privilege to that of other userspace processes in the same guest and potentially thereby to that of the guest operating system (bsc#1126201). - Fixed an issue which could allow a malicious or buggy x86 PV guest
References
#1026236 #1114988 #1123157 #1126140 #1126141
#1126192 #1126195 #1126196 #1126198 #1126201
#1127400 #1129623
Cross- CVE-2018-19967 CVE-2019-6778 CVE-2019-9824
Affected Products:
SUSE OpenStack Cloud 7
SUSE Linux Enterprise Server for SAP 12-SP2
SUSE Linux Enterprise Server 12-SP2-LTSS
SUSE Linux Enterprise Server 12-SP2-BCL
SUSE Enterprise Storage 4
https://www.suse.com/security/cve/CVE-2018-19967.html
https://www.suse.com/security/cve/CVE-2019-6778.html
https://www.suse.com/security/cve/CVE-2019-9824.html
https://bugzilla.suse.com/1026236
https://bugzilla.suse.com/1114988
https://bugzilla.suse.com/1123157
https://bugzilla.suse.com/1126140
https://bugzilla.suse.com/1126141
https://bugzilla.suse.com/1126192
https://bugzilla.suse.com/1126195
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2019:0921-1
Rating: important
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!