| Beschreibung: | Summary:
The remote host is missing an update for the 'xen'
package(s) announced via the referenced advisory.
Vulnerability Insight:
xen was updated to fix 46 security issues.
These security issues were fixed:
- CVE-2013-4527: Buffer overflow in hw/timer/hpet.c might have allowed
remote attackers to execute arbitrary code via vectors related to the
number of timers (bsc#964746).
- CVE-2013-4529: Buffer overflow in hw/pci/pcie_aer.c allowed remote
attackers to cause a denial of service and possibly execute arbitrary
code via a large log_num value in a savevm image (bsc#964929).
- CVE-2013-4530: Buffer overflow in hw/ssi/pl022.c allowed remote
attackers to cause a denial of service or possibly execute arbitrary
code via crafted tx_fifo_head and rx_fifo_head values in a savevm image
(bsc#964950).
- CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in
hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or
possibly execute arbitrary code via a crafted s- rx_level value in a
savevm image (bsc#964644).
- CVE-2013-4534: Buffer overflow in hw/intc/openpic.c allowed remote
attackers to cause a denial of service or possibly execute arbitrary
code via vectors related to IRQDest elements (bsc#964452).
- CVE-2013-4537: The ssi_sd_transfer function in hw/sd/ssi-sd.c allowed
remote attackers to execute arbitrary code via a crafted arglen value in
a savevm image (bsc#962642).
- CVE-2013-4538: Multiple buffer overflows in the ssd0323_load function in
hw/display/ssd0323.c allowed remote attackers to cause a denial of
service (memory corruption) or possibly execute arbitrary code via
crafted (1) cmd_len, (2) row, or (3) col values (4) row_start and
row_end values or (5) col_star and col_end values in a savevm image
(bsc#962335).
- CVE-2013-4539: Multiple buffer overflows in the tsc210x_load function in
hw/input/tsc210x.c might have allowed remote attackers to execute
arbitrary code via a crafted (1) precision, (2) nextprecision, (3)
function, or (4) nextfunction value in a savevm image (bsc#962758).
- CVE-2014-0222: Integer overflow in the qcow_open function in
block/qcow.c allowed remote attackers to cause a denial of service
(crash) via a large L2 table in a QCOW version 1 image (bsc#964925).
- CVE-2014-3640: The sosendto function in slirp/udp.c allowed local users
to cause a denial of service (NULL pointer dereference) by sending a udp
packet with a value of 0 in the source port and address, which triggers
access of an uninitialized socket (bsc#965112).
- CVE-2014-3689: The vmware-vga driver (hw/display/vmware_vga.c) allowed
local guest users to write to qemu memory locations ...
Description truncated, please see the referenced URL(s) for more information.
Affected Software/OS:
xen on SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Desktop 12
Solution:
Please install the updated package(s).
CVSS Score:
7.8
CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
