suse/xen&distro=SUSE Linux Enterprise Point of Sale 11 SP3

Vulnerabilities (134)

• CVE-2019-12067MedJun 2, 2021
  affected < 4.2.5_21-45.33.1fixed 4.2.5_21-45.33.1

  The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null.

• CVE-2020-11742MedApr 14, 2020
  affected < 4.2.5_22-45.36.1fixed 4.2.5_22-45.36.1

  An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOP_copy. Grant table operations are expected to return 0 for success, and a negative number for errors. The fix for CVE-2017-12135 int

• CVE-2020-11741HigApr 14, 2020
  affected < 4.2.5_22-45.36.1fixed 4.2.5_22-45.36.1

  An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active profiling) to obtain sensitive information about other guests, cause a denial of service, or possibly gain privileges. For guests for which "active" profiling was enabled by the admini

• CVE-2020-11740MedApr 14, 2020
  affected < 4.2.5_22-45.36.1fixed 4.2.5_22-45.36.1

  An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. Thes

• CVE-2020-8608MedFeb 6, 2020
  affected < 4.2.5_22-45.36.1fixed 4.2.5_22-45.36.1

  In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.

• CVE-2020-7211HigJan 21, 2020
  affected < 4.2.5_22-45.36.1fixed 4.2.5_22-45.36.1

  tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

• CVE-2019-18425CriOct 31, 2019
  affected < 4.2.5_22-45.36.1fixed 4.2.5_22-45.36.1

  An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS privileges by installing and using descriptors. There is missing descriptor table limit checking in x86 PV emulation. When emulating certain PV guest operations, descriptor table acce

• CVE-2019-18421HigOct 31, 2019
  affected < 4.2.5_22-45.36.1fixed 4.2.5_22-45.36.1

  An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion operations. There are issues with restartable PV type change operations. To avoid using shadow pagetables for

• CVE-2019-17344MedOct 8, 2019
  affected < 4.2.5_21-45.33.1fixed 4.2.5_21-45.33.1

  An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service by leveraging a long-running operation that exists to support restartability of PTE updates.

• CVE-2019-17343MedOct 8, 2019
  affected < 4.2.5_21-45.33.1fixed 4.2.5_21-45.33.1

  An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging incorrect use of the HVM physmap concept for PV domains.

• CVE-2019-17342HigOct 8, 2019
  affected < 4.2.5_21-45.33.1fixed 4.2.5_21-45.33.1

  An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a race condition that arose when XENMEM_exchange was introduced.

• CVE-2019-17341HigOct 8, 2019
  affected < 4.2.5_21-45.33.1fixed 4.2.5_21-45.33.1

  An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a page-writability race condition during addition of a passed-through PCI device.

• CVE-2019-17340HigOct 8, 2019
  affected < 4.2.5_21-45.33.1fixed 4.2.5_21-45.33.1

  An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privileges because grant-table transfer requests are mishandled.

• CVE-2019-12068LowSep 24, 2019
  affected < 4.2.5_21-45.33.1fixed 4.2.5_21-45.33.1

  In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an

• CVE-2019-15890HigSep 6, 2019
  affected < 4.2.5_21-45.33.1fixed 4.2.5_21-45.33.1

  libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c.

• CVE-2019-14378HigJul 29, 2019
  affected < 4.2.5_21-45.33.1fixed 4.2.5_21-45.33.1

  ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.

• CVE-2019-9824MedJun 3, 2019
  affected < 4.2.5_21-45.30.1fixed 4.2.5_21-45.30.1

  tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

• CVE-2018-20815CriMay 31, 2019
  affected < 4.2.5_21-45.33.1fixed 4.2.5_21-45.33.1

  In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.

• CVE-2019-12155HigMay 24, 2019
  affected < 4.2.5_21-45.33.1fixed 4.2.5_21-45.33.1

  interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.

• CVE-2019-6778HigMar 21, 2019
  affected < 4.2.5_21-45.30.1fixed 4.2.5_21-45.30.1

  In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.