Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE 12-SP3: 2022:3960-1 Important: 17 Memory Management Issues

suse
Calendar Grey November 11, 2022
Dist Suse Esm H88
SUSE has rolled out updates addressing 17 vulnerabilities in Xen concerning memory handling and access flaws; immediate action necessary.
An update that fixes 17 vulnerabilities is now available

Summary

This update for xen fixes the following issues: - CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory (bsc#1204482) - CVE-2022-42309: xen: Xenstore: Guests can crash xenstored (bsc#1204485) - CVE-2022-42310: xen: Xenstore: Guests can create orphaned Xenstore nodes (bsc#1204487) - CVE-2022-42319: xen: Xenstore: Guests can cause Xenstore to not free temporary memory (bsc#1204488) - CVE-2022-42320: xen: Xenstore: Guests can get access to Xenstore nodes of deleted domains (bsc#1204489) - CVE-2022-42321: xen: Xenstore: Guests can crash xenstored via exhausting the stack (bsc#1204490) - CVE-2022-42322,CVE-2022-42323: xen: Xenstore: cooperating guests can

Topics%20covered

Topics Covered

security advisory security update access control important memory management SUSE xen

References

#1204482 #1204485 #1204487 #1204488 #1204489

#1204490 #1204494 #1204496

Cross- CVE-2022-42309 CVE-2022-42310 CVE-2022-42311

CVE-2022-42312 CVE-2022-42313 CVE-2022-42314

CVE-2022-42315 CVE-2022-42316 CVE-2022-42317

CVE-2022-42318 CVE-2022-42319 CVE-2022-42320

CVE-2022-42321 CVE-2022-42322 CVE-2022-42323

CVE-2022-42325 CVE-2022-42326

CVSS scores:

CVE-2022-42309 (NVD) : 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CVE-2022-42309 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVE-2022-42310 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2022-42310 (SUSE): 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

CVE-2022-42311 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:3960-1
Rating: important

Topics%20covered

Topics Covered

security advisory security update access control important memory management SUSE xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here