Security update for xen SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:1795-1 Final 1 1 2017-07-06T09:40:48Z current 2017-07-06T09:40:48Z 2017-07-06T09:40:48Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xen This update for xen fixes several issues. These security issues were fixed: - CVE-2017-9503: The MegaRAID SAS 8708EM2 Host Bus Adapter emulation support was vulnerable to a null pointer dereference issue which allowed a privileged user inside guest to crash the Qemu process on the host resulting in DoS (bsc#1043297) - CVE-2017-9374: Missing free of 's->ipacket', causes a host memory leak, allowing for DoS (bsc#1043074) - CVE-2017-10911: blkif responses leaked backend stack data, which allowed unprivileged guest to obtain sensitive information from the host or other guests (XSA-216, bsc#1042863) - CVE-2017-10912: Page transfer might have allowed PV guest to elevate privilege (XSA-217, bsc#1042882) - CVE-2017-10913, CVE-2017-10914: Races in the grant table unmap code allowed for informations leaks and potentially privilege escalation (XSA-218, bsc#1042893) - CVE-2017-10915: Insufficient reference counts during shadow emulation allowed a malicious pair of guest to elevate their privileges to the privileges that XEN runs under (XSA-219, bsc#1042915) - CVE-2017-10917: Missing NULL pointer check in event channel poll allows guests to DoS the host (XSA-221, bsc#1042924) - CVE-2017-10918: Stale P2M mappings due to insufficient error checking allowed malicious guest to leak information or elevate privileges (XSA-222, bsc#1042931) - CVE-2017-10920, CVE-2017-10921, CVE-2017-10922: Grant table operations mishandled reference counts allowing malicious guests to escape (XSA-224, bsc#1042938) - CVE-2017-9330: USB OHCI Emulation in qemu allowed local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value (bsc#1042160) - CVE-2017-8309: Memory leak in the audio/audio.c allowed remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture (bsc#1037243) - CVE-2017-8112: hw/scsi/vmw_pvscsi.c allowed local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count (bsc#1036470) - CVE-2017-8905: Xen a failsafe callback, which might have allowed PV guest OS users to execute arbitrary code on the host OS (XSA-215, bsc#1034845). These non-security issues were fixed: - bsc#1031460: Fixed DomU Live Migration - bsc#1014136: Fixed kdump SLES12-SP2 - bsc#1026236: Equalized paravirtualized vs. fully virtualized migration speed - bsc#1032148: Ensure that time doesn't goes backwards during live migration of HVM domU - bsc#1027519: Included various upstream patches The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-SAP-12-2017-1118,SUSE-SLE-SERVER-12-2017-1118 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ Link for SUSE-SU-2017:1795-1 https://lists.opensuse.org/opensuse-security-announce/2017-07/msg00005.html E-Mail link for SUSE-SU-2017:1795-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1014136 SUSE Bug 1014136 https://bugzilla.suse.com/1026236 SUSE Bug 1026236 https://bugzilla.suse.com/1027519 SUSE Bug 1027519 https://bugzilla.suse.com/1031460 SUSE Bug 1031460 https://bugzilla.suse.com/1032148 SUSE Bug 1032148 https://bugzilla.suse.com/1034845 SUSE Bug 1034845 https://bugzilla.suse.com/1036470 SUSE Bug 1036470 https://bugzilla.suse.com/1037243 SUSE Bug 1037243 https://bugzilla.suse.com/1042160 SUSE Bug 1042160 https://bugzilla.suse.com/1042863 SUSE Bug 1042863 https://bugzilla.suse.com/1042882 SUSE Bug 1042882 https://bugzilla.suse.com/1042893 SUSE Bug 1042893 https://bugzilla.suse.com/1042915 SUSE Bug 1042915 https://bugzilla.suse.com/1042924 SUSE Bug 1042924 https://bugzilla.suse.com/1042931 SUSE Bug 1042931 https://bugzilla.suse.com/1042938 SUSE Bug 1042938 https://bugzilla.suse.com/1043074 SUSE Bug 1043074 https://bugzilla.suse.com/1043297 SUSE Bug 1043297 https://www.suse.com/security/cve/CVE-2017-10911/ SUSE CVE CVE-2017-10911 page https://www.suse.com/security/cve/CVE-2017-10912/ SUSE CVE CVE-2017-10912 page https://www.suse.com/security/cve/CVE-2017-10913/ SUSE CVE CVE-2017-10913 page https://www.suse.com/security/cve/CVE-2017-10914/ SUSE CVE CVE-2017-10914 page https://www.suse.com/security/cve/CVE-2017-10915/ SUSE CVE CVE-2017-10915 page https://www.suse.com/security/cve/CVE-2017-10917/ SUSE CVE CVE-2017-10917 page https://www.suse.com/security/cve/CVE-2017-10918/ SUSE CVE CVE-2017-10918 page https://www.suse.com/security/cve/CVE-2017-10920/ SUSE CVE CVE-2017-10920 page https://www.suse.com/security/cve/CVE-2017-10921/ SUSE CVE CVE-2017-10921 page https://www.suse.com/security/cve/CVE-2017-10922/ SUSE CVE CVE-2017-10922 page https://www.suse.com/security/cve/CVE-2017-8112/ SUSE CVE CVE-2017-8112 page https://www.suse.com/security/cve/CVE-2017-8309/ SUSE CVE CVE-2017-8309 page https://www.suse.com/security/cve/CVE-2017-8905/ SUSE CVE CVE-2017-8905 page https://www.suse.com/security/cve/CVE-2017-9330/ SUSE CVE CVE-2017-9330 page https://www.suse.com/security/cve/CVE-2017-9374/ SUSE CVE CVE-2017-9374 page https://www.suse.com/security/cve/CVE-2017-9503/ SUSE CVE CVE-2017-9503 page SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for SAP Applications 12 xen-4.4.4_21-22.42.1 xen-doc-html-4.4.4_21-22.42.1 xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 xen-libs-4.4.4_21-22.42.1 xen-libs-32bit-4.4.4_21-22.42.1 xen-tools-4.4.4_21-22.42.1 xen-tools-domU-4.4.4_21-22.42.1 xen-4.4.4_21-22.42.1 as a component of SUSE Linux Enterprise Server 12-LTSS xen-doc-html-4.4.4_21-22.42.1 as a component of SUSE Linux Enterprise Server 12-LTSS xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 as a component of SUSE Linux Enterprise Server 12-LTSS xen-libs-4.4.4_21-22.42.1 as a component of SUSE Linux Enterprise Server 12-LTSS xen-libs-32bit-4.4.4_21-22.42.1 as a component of SUSE Linux Enterprise Server 12-LTSS xen-tools-4.4.4_21-22.42.1 as a component of SUSE Linux Enterprise Server 12-LTSS xen-tools-domU-4.4.4_21-22.42.1 as a component of SUSE Linux Enterprise Server 12-LTSS xen-4.4.4_21-22.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-doc-html-4.4.4_21-22.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-libs-4.4.4_21-22.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-libs-32bit-4.4.4_21-22.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-tools-4.4.4_21-22.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-tools-domU-4.4.4_21-22.42.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka XSA-216. CVE-2017-10911 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 important 1.9 AV:L/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-10911.html CVE-2017-10911 https://bugzilla.suse.com/1042863 SUSE Bug 1042863 https://bugzilla.suse.com/1043330 SUSE Bug 1043330 https://bugzilla.suse.com/1057378 SUSE Bug 1057378 Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217. CVE-2017-10912 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 important 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-10912.html CVE-2017-10912 https://bugzilla.suse.com/1042882 SUSE Bug 1042882 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1. CVE-2017-10913 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 important 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-10913.html CVE-2017-10913 https://bugzilla.suse.com/1042893 SUSE Bug 1042893 The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2. CVE-2017-10914 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 important 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-10914.html CVE-2017-10914 https://bugzilla.suse.com/1042893 SUSE Bug 1042893 The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219. CVE-2017-10915 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 important 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-10915.html CVE-2017-10915 https://bugzilla.suse.com/1042915 SUSE Bug 1042915 Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information, aka XSA-221. CVE-2017-10917 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 important 5.4 AV:L/AC:M/Au:N/C:P/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-10917.html CVE-2017-10917 https://bugzilla.suse.com/1042924 SUSE Bug 1042924 Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222. CVE-2017-10918 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 important 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-10918.html CVE-2017-10918 https://bugzilla.suse.com/1042931 SUSE Bug 1042931 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 1. CVE-2017-10920 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 important 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-10920.html CVE-2017-10920 https://bugzilla.suse.com/1042938 SUSE Bug 1042938 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2. CVE-2017-10921 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 important 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-10921.html CVE-2017-10921 https://bugzilla.suse.com/1042938 SUSE Bug 1042938 The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service (loss of grant trackability), aka XSA-224 bug 3. CVE-2017-10922 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-10922.html CVE-2017-10922 https://bugzilla.suse.com/1042938 SUSE Bug 1042938 hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count. CVE-2017-8112 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 low 1.5 AV:L/AC:M/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-8112.html CVE-2017-8112 https://bugzilla.suse.com/1036211 SUSE Bug 1036211 https://bugzilla.suse.com/1036470 SUSE Bug 1036470 Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture. CVE-2017-8309 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 low 1.5 AV:L/AC:M/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-8309.html CVE-2017-8309 https://bugzilla.suse.com/1037242 SUSE Bug 1037242 https://bugzilla.suse.com/1037243 SUSE Bug 1037243 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215. CVE-2017-8905 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 important 6 AV:L/AC:H/Au:S/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-8905.html CVE-2017-8905 https://bugzilla.suse.com/1034845 SUSE Bug 1034845 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505. CVE-2017-9330 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 low 1.5 AV:L/AC:M/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-9330.html CVE-2017-9330 https://bugzilla.suse.com/1042159 SUSE Bug 1042159 https://bugzilla.suse.com/1042160 SUSE Bug 1042160 https://bugzilla.suse.com/1043157 SUSE Bug 1043157 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device. CVE-2017-9374 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 low 1.7 AV:L/AC:L/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-9374.html CVE-2017-9374 https://bugzilla.suse.com/1043073 SUSE Bug 1043073 https://bugzilla.suse.com/1043074 SUSE Bug 1043074 QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing. CVE-2017-9503 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_21_k3.12.61_52.77-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_21-22.42.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_21-22.42.1 low 1.5 AV:L/AC:M/Au:S/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20171795-1/ https://www.suse.com/security/cve/CVE-2017-9503.html CVE-2017-9503 https://bugzilla.suse.com/1043296 SUSE Bug 1043296 https://bugzilla.suse.com/1043297 SUSE Bug 1043297 https://bugzilla.suse.com/1043312 SUSE Bug 1043312