rpm package
suse/xen&distro=SUSE OpenStack Cloud 6
pkg:rpm/suse/xen&distro=SUSE%20OpenStack%20Cloud%206
Vulnerabilities (52)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-10915 | Cri | 9.0 | < 4.5.5_12-22.18.1 | 4.5.5_12-22.18.1 | Jul 5, 2017 | The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219. | |
| CVE-2017-10914 | Hig | 8.1 | < 4.5.5_12-22.18.1 | 4.5.5_12-22.18.1 | Jul 5, 2017 | The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2. | |
| CVE-2017-10913 | Cri | 9.8 | < 4.5.5_12-22.18.1 | 4.5.5_12-22.18.1 | Jul 5, 2017 | The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1. | |
| CVE-2017-10912 | Cri | 10.0 | < 4.5.5_12-22.18.1 | 4.5.5_12-22.18.1 | Jul 5, 2017 | Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217. | |
| CVE-2017-10911 | Med | 6.5 | < 4.5.5_12-22.18.1 | 4.5.5_12-22.18.1 | Jul 5, 2017 | The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interfac | |
| CVE-2017-9503 | Med | 5.5 | < 4.5.5_12-22.18.1 | 4.5.5_12-22.18.1 | Jun 16, 2017 | QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing. | |
| CVE-2017-9374 | Med | 5.5 | < 4.5.5_12-22.18.1 | 4.5.5_12-22.18.1 | Jun 16, 2017 | Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device. | |
| CVE-2017-9330 | Med | 5.6 | < 4.5.5_12-22.18.1 | 4.5.5_12-22.18.1 | Jun 8, 2017 | QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505. | |
| CVE-2017-8309 | Hig | 7.5 | < 4.5.5_12-22.18.1 | 4.5.5_12-22.18.1 | May 23, 2017 | Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture. | |
| CVE-2017-8905 | Hig | 8.8 | < 4.5.5_12-22.18.1 | 4.5.5_12-22.18.1 | May 11, 2017 | Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215. | |
| CVE-2017-8112 | Med | 6.5 | < 4.5.5_12-22.18.1 | 4.5.5_12-22.18.1 | May 2, 2017 | hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count. | |
| CVE-2017-5526 | Med | 6.5 | < 4.5.5_18-22.31.1 | 4.5.5_18-22.31.1 | Mar 15, 2017 | Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations. |
- affected < 4.5.5_12-22.18.1fixed 4.5.5_12-22.18.1
The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219.
- affected < 4.5.5_12-22.18.1fixed 4.5.5_12-22.18.1
The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2.
- affected < 4.5.5_12-22.18.1fixed 4.5.5_12-22.18.1
The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1.
- affected < 4.5.5_12-22.18.1fixed 4.5.5_12-22.18.1
Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217.
- affected < 4.5.5_12-22.18.1fixed 4.5.5_12-22.18.1
The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interfac
- affected < 4.5.5_12-22.18.1fixed 4.5.5_12-22.18.1
QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.
- affected < 4.5.5_12-22.18.1fixed 4.5.5_12-22.18.1
Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged users to cause a denial of service (memory consumption) by repeatedly hot-unplugging the device.
- affected < 4.5.5_12-22.18.1fixed 4.5.5_12-22.18.1
QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505.
- affected < 4.5.5_12-22.18.1fixed 4.5.5_12-22.18.1
Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.
- affected < 4.5.5_12-22.18.1fixed 4.5.5_12-22.18.1
Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215.
- affected < 4.5.5_12-22.18.1fixed 4.5.5_12-22.18.1
hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.
- affected < 4.5.5_18-22.31.1fixed 4.5.5_18-22.31.1
Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.
Page 3 of 3