Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE 15-SP4: SUSE-SU-2022:4007-1 Important: Xen DoS Issues

suse
Calendar Grey November 16, 2022
Dist Suse Esm H88
This patch resolves 22 critical vulnerabilities within xen. Key updates can be accessed for multiple SUSE platforms.
An update that fixes 21 vulnerabilities is now available

Summary

This update for xen fixes the following issues: - CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806). - CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807). - CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory (bsc#1204482) - CVE-2022-42309: xen: Xenstore: Guests can crash xenstored (bsc#1204485) - CVE-2022-42310: xen: Xenstore: Guests can create orphaned Xenstore nodes (bsc#1204487) - CVE-2022-42319: xen: Xenstore: Guests can cause Xenstore to not free temporary memory (bsc#1204488) - CVE-2022-42320: xen: Xenstore: Guests can get access to Xenstore nodes of deleted domains (bsc#1204489)

Topics%20covered

Topics Covered

security advisory denial of service important SUSE xen

References

#1027519 #1193923 #1203806 #1203807 #1204482

#1204483 #1204485 #1204487 #1204488 #1204489

#1204490 #1204494 #1204496

Cross- CVE-2022-33746 CVE-2022-33747 CVE-2022-33748

CVE-2022-42309 CVE-2022-42310 CVE-2022-42311

CVE-2022-42312 CVE-2022-42313 CVE-2022-42314

CVE-2022-42315 CVE-2022-42316 CVE-2022-42317

CVE-2022-42318 CVE-2022-42319 CVE-2022-42320

CVE-2022-42321 CVE-2022-42322 CVE-2022-42323

CVE-2022-42325 CVE-2022-42326 CVE-2022-42327

CVSS scores:

CVE-2022-33746 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CVE-2022-33746 (SUSE): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

CVE-2022-33747 (NVD) : 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

CVE-2022-33748 (NVD) : 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:4007-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service important SUSE xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here