Security update for xen SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:0923-1 Final 1 1 2015-05-12T21:54:24Z current 2015-05-12T21:54:24Z 2015-05-12T21:54:24Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xen XEN was updated to fix two security issues and bugs. Security issues fixed: * CVE-2015-3340: Xen did not initialize certain fields, which allowed certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request. * CVE-2015-2751: Xen, when using toolstack disaggregation, allowed remote domains with partial management control to cause a denial of service (host lock) via unspecified domctl operations. * CVE-2015-2752: The XEN_DOMCTL_memory_mapping hypercall in Xen, when using a PCI passthrough device, was not preemptable, which allowed local x86 HVM domain users to cause a denial of service (host CPU consumption) via a crafted request to the device model (qemu-dm). * CVE-2015-3456: Fixed a buffer overflow in the floppy drive emulation, which could be used to denial of service attacks or potential code execution against the host. Bugs fixed: - xentop: Fix memory leak on read failure The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2015-206,SUSE-SLE-SDK-12-2015-206,SUSE-SLE-SERVER-12-2015-206 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20150923-1/ Link for SUSE-SU-2015:0923-1 https://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html E-Mail link for SUSE-SU-2015:0923-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/922705 SUSE Bug 922705 https://bugzilla.suse.com/922709 SUSE Bug 922709 https://bugzilla.suse.com/927967 SUSE Bug 927967 https://bugzilla.suse.com/929339 SUSE Bug 929339 https://www.suse.com/security/cve/CVE-2015-2751/ SUSE CVE CVE-2015-2751 page https://www.suse.com/security/cve/CVE-2015-2752/ SUSE CVE CVE-2015-2752 page https://www.suse.com/security/cve/CVE-2015-3340/ SUSE CVE CVE-2015-3340 page https://www.suse.com/security/cve/CVE-2015-3456/ SUSE CVE CVE-2015-3456 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 xen-4.4.2_04-18.1 xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 xen-libs-4.4.2_04-18.1 xen-libs-32bit-4.4.2_04-18.1 xen-devel-4.4.2_04-18.1 xen-doc-html-4.4.2_04-18.1 xen-tools-4.4.2_04-18.1 xen-tools-domU-4.4.2_04-18.1 xen-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Desktop 12 xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 as a component of SUSE Linux Enterprise Desktop 12 xen-libs-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Desktop 12 xen-libs-32bit-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Desktop 12 xen-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Server 12 xen-doc-html-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Server 12 xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 as a component of SUSE Linux Enterprise Server 12 xen-libs-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Server 12 xen-libs-32bit-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Server 12 xen-tools-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Server 12 xen-tools-domU-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Server 12 xen-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-doc-html-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-libs-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-libs-32bit-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-tools-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-tools-domU-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-devel-4.4.2_04-18.1 as a component of SUSE Linux Enterprise Software Development Kit 12 Xen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with partial management control to cause a denial of service (host lock) via unspecified domctl operations. CVE-2015-2751 SUSE Linux Enterprise Desktop 12:xen-4.4.2_04-18.1 SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.2_04-18.1 SUSE Linux Enterprise Desktop 12:xen-libs-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-doc-html-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-libs-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-tools-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.2_04-18.1 SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.2_04-18.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150923-1/ https://www.suse.com/security/cve/CVE-2015-2751.html CVE-2015-2751 https://bugzilla.suse.com/922709 SUSE Bug 922709 https://bugzilla.suse.com/950367 SUSE Bug 950367 The XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain users to cause a denial of service (host CPU consumption) via a crafted request to the device model (qemu-dm). CVE-2015-2752 SUSE Linux Enterprise Desktop 12:xen-4.4.2_04-18.1 SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.2_04-18.1 SUSE Linux Enterprise Desktop 12:xen-libs-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-doc-html-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-libs-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-tools-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.2_04-18.1 SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.2_04-18.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150923-1/ https://www.suse.com/security/cve/CVE-2015-2752.html CVE-2015-2752 https://bugzilla.suse.com/922705 SUSE Bug 922705 Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2) XEN_SYSCTL_getdomaininfolist request. CVE-2015-3340 SUSE Linux Enterprise Desktop 12:xen-4.4.2_04-18.1 SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.2_04-18.1 SUSE Linux Enterprise Desktop 12:xen-libs-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-doc-html-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-libs-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-tools-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.2_04-18.1 SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.2_04-18.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150923-1/ https://www.suse.com/security/cve/CVE-2015-3340.html CVE-2015-3340 https://bugzilla.suse.com/927967 SUSE Bug 927967 https://bugzilla.suse.com/929339 SUSE Bug 929339 The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM. CVE-2015-3456 SUSE Linux Enterprise Desktop 12:xen-4.4.2_04-18.1 SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.2_04-18.1 SUSE Linux Enterprise Desktop 12:xen-libs-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-doc-html-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-libs-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-tools-4.4.2_04-18.1 SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.2_04_k3.12.39_47-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.2_04-18.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.2_04-18.1 SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.2_04-18.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20150923-1/ https://www.suse.com/security/cve/CVE-2015-3456.html CVE-2015-3456 https://bugzilla.suse.com/929339 SUSE Bug 929339 https://bugzilla.suse.com/932770 SUSE Bug 932770 https://bugzilla.suse.com/935900 SUSE Bug 935900