Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE: 2021:3813-1 Moderate: Xen Memory Limit and DoS Issues

suse
Calendar Grey November 29, 2021
Scroller Suse
SUSE Security Bulletin: 5 updates for kernel released with moderate risk and instructions for deployment.
An update that fixes 6 vulnerabilities is now available

Summary

This update for xen fixes the following issues: - CVE-2021-28704, CVE-2021-28707, CVE-2021-28708: Fixed PoD operations on misaligned GFNs (XSA-388) (bsc#1192557). - CVE-2021-28705, CVE-2021-28709: Fixed issues with partially successful P2M updates on x86 (XSA-389) (bsc#1192559). - CVE-2021-28706: Fixed guests may exceed their designated memory limit (XSA-385) (bsc#1192554).

Topics%20covered

Topics Covered

security advisory moderate DoS SUSE Linux xen memory limit

References

#1192554 #1192557 #1192559

Cross- CVE-2021-28704 CVE-2021-28705 CVE-2021-28706

CVE-2021-28707 CVE-2021-28708 CVE-2021-28709

CVSS scores:

CVE-2021-28704 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-28705 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-28706 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-28707 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-28708 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-28709 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products:

SUSE Linux Enterprise Server 12-SP2-BCL

https://www.suse.com/security/cve/CVE-2021-28704.html

https://www.suse.com/security/cve/CVE-2021-28705.html

Announcement ID: SUSE-SU-2021:3813-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate DoS SUSE Linux xen memory limit

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.