Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2019:3310-1 Important: Xen Denial of Service Issues Fixed

suse
Calendar Grey December 16, 2019
Dist Suse Esm H88
Critical SUSE Patch Update for xen addresses various vulnerabilities impacting both servers and development environments. Discover the details.
An update that fixes 10 vulnerabilities is now available

Summary

This update for xen fixes the following issues: - CVE-2019-19581: Fixed a potential out of bounds on 32-bit Arm (bsc#1158003 XSA-307). - CVE-2019-19582: Fixed a potential infinite loop when x86 accesses to bitmaps with a compile time known size of 64 (bsc#1158003 XSA-307). - CVE-2019-19583: Fixed improper checks which could have allowed HVM/PVH guest userspace code to crash the guest,leading to a guest denial of service (bsc#1158004 XSA-308). - CVE-2019-19578: Fixed an issue where a malicious or buggy PV guest could have caused hypervisor crash resulting in denial of service affecting the entire host (bsc#1158005 XSA-309). - CVE-2019-19580: Fixed a privilege escalation where a malicious PV guest administrator could have been able to escalate their privilege to that of the host (bsc#1158006 XSA-310).

References

#1154460 #1154461 #1154464 #1157888 #1158003

#1158004 #1158005 #1158006 #1158007

Cross- CVE-2019-18422 CVE-2019-18423 CVE-2019-18424

CVE-2019-19577 CVE-2019-19578 CVE-2019-19579

CVE-2019-19580 CVE-2019-19581 CVE-2019-19582

CVE-2019-19583

Affected Products:

SUSE Linux Enterprise Software Development Kit 12-SP4

SUSE Linux Enterprise Server 12-SP4

SUSE Linux Enterprise Desktop 12-SP4

https://www.suse.com/security/cve/CVE-2019-18422.html

https://www.suse.com/security/cve/CVE-2019-18423.html

https://www.suse.com/security/cve/CVE-2019-18424.html

https://www.suse.com/security/cve/CVE-2019-19577.html

https://www.suse.com/security/cve/CVE-2019-19578.html

https://www.suse.com/security/cve/CVE-2019-19579.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:3310-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here