[SUSE-SU-2018:2409-1] Security update for xen
Severity
Important
CVEs
1
Security update for xen
This update for xen fixes the following security issues:
- CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis (bsc#1091107, bsc#1027519).
- Incorrect MSR_DEBUGCTL handling let guests enable BTS allowing a malicious or buggy guest administrator can lock up the entire host (bsc#1103276)
- ID
- SUSE-SU-2018:2409-1
- Severity
- important
- URL
- https://www.suse.com/support/update/announcement/2018/suse-su-20182409-1/
- Published
-
2018-08-17T11:42:30
(6 years ago) - Modified
-
2018-08-17T11:42:30
(6 years ago) - Rights
- Copyright 2024 SUSE LLC. All rights reserved.
- Other Advisories
-
- ALAS-2018-1058
- ALAS2-2018-1058
- ALPINE:CVE-2018-3646
- CISCO-SA-20180814-CPUSIDECHANNEL
- DSA-4274-1
- DSA-4279-1
- ELSA-2018-2384
- ELSA-2018-2390
- ELSA-2018-4195
- ELSA-2018-4196
- FEDORA-2018-0edb45d9db
- FEDORA-2018-1621b2204a
- FEDORA-2018-1c80fea1cd
- FEDORA-2018-2ee3411cb8
- FEDORA-2018-3857a8b41a
- FEDORA-2018-59e4747e0f
- FEDORA-2018-683dfde81a
- FEDORA-2018-6e8c330d50
- FEDORA-2018-73dd8de892
- FEDORA-2018-79d7c3d2df
- FEDORA-2018-8422d94975
- FEDORA-2018-915602df63
- FEDORA-2018-94315e9a6b
- FEDORA-2018-9f4381d8c4
- FEDORA-2018-a0914af224
- FEDORA-2018-b68776e5b0
- FEDORA-2018-c0a1284064
- FEDORA-2018-d77cc41f35
- FEDORA-2018-ddbaca855e
- FEDORA-2018-e820fccd83
- FEDORA-2018-f20a0cead5
- FEDORA-2018-f8cba144ae
- FEDORA-2018-fe24359b69
- FEDORA-2019-16de0047d4
- FEDORA-2019-196ab64d65
- FEDORA-2019-1b986880ea
- FEDORA-2019-20a89ca9af
- FEDORA-2019-337484d88b
- FEDORA-2019-3da64f3e61
- FEDORA-2019-4002b91800
- FEDORA-2019-509c133845
- FEDORA-2019-65c6d11eba
- FEDORA-2019-7d3500d712
- FEDORA-2019-a6cd583a8d
- FEDORA-2019-bce6498890
- FEDORA-2019-c36afa818c
- FEDORA-2019-ce2933b003
- FREEBSD:2310B814-A652-11E8-805B-A4BADB2F4699
- GLSA-201810-06
- RHSA-2018:2384
- RHSA-2018:2390
- RHSA-2018:2395
- SUSE-SU-2018:2328-1
- SUSE-SU-2018:2331-1
- SUSE-SU-2018:2331-2
- SUSE-SU-2018:2332-1
- SUSE-SU-2018:2335-1
- SUSE-SU-2018:2338-1
- SUSE-SU-2018:2341-1
- SUSE-SU-2018:2342-1
- SUSE-SU-2018:2344-1
- SUSE-SU-2018:2344-2
- SUSE-SU-2018:2345-1
- SUSE-SU-2018:2346-1
- SUSE-SU-2018:2347-1
- SUSE-SU-2018:2348-1
- SUSE-SU-2018:2349-1
- SUSE-SU-2018:2350-1
- SUSE-SU-2018:2351-1
- SUSE-SU-2018:2352-1
- SUSE-SU-2018:2353-1
- SUSE-SU-2018:2354-1
- SUSE-SU-2018:2355-1
- SUSE-SU-2018:2356-1
- SUSE-SU-2018:2358-1
- SUSE-SU-2018:2359-1
- SUSE-SU-2018:2362-1
- SUSE-SU-2018:2363-1
- SUSE-SU-2018:2364-1
- SUSE-SU-2018:2366-1
- SUSE-SU-2018:2367-1
- SUSE-SU-2018:2368-1
- SUSE-SU-2018:2369-1
- SUSE-SU-2018:2374-1
- SUSE-SU-2018:2380-1
- SUSE-SU-2018:2381-1
- SUSE-SU-2018:2384-1
- SUSE-SU-2018:2387-1
- SUSE-SU-2018:2389-1
- SUSE-SU-2018:2391-1
- SUSE-SU-2018:2394-1
- SUSE-SU-2018:2401-1
- SUSE-SU-2018:2410-1
- SUSE-SU-2018:2410-2
- SUSE-SU-2018:2413-1
- SUSE-SU-2018:2414-1
- SUSE-SU-2018:2416-1
- SUSE-SU-2018:2426-1
- SUSE-SU-2018:2450-1
- SUSE-SU-2018:2472-1
- SUSE-SU-2018:2473-1
- SUSE-SU-2018:2474-1
- SUSE-SU-2018:2480-1
- SUSE-SU-2018:2482-1
- SUSE-SU-2018:2483-1
- SUSE-SU-2018:2528-1
- SUSE-SU-2018:2596-1
- SUSE-SU-2018:2637-1
- SUSE-SU-2018:2963-1
- SUSE-SU-2018:3490-1
- SUSE-SU-2018:4300-1
- USN-3740-1
- USN-3740-2
- USN-3741-1
- USN-3741-2
- USN-3742-1
- USN-3742-2
- USN-3756-1
- USN-3823-1
- VU:982149
- XSA-273
Source | # ID | Name | URL |
---|---|---|---|
Suse | SUSE ratings | https://www.suse.com/support/security/rating/ | |
Suse | URL of this CSAF notice | https://ftp.suse.com/pub/projects/security/csaf/suse-su-2018_2409-1.json | |
Suse | URL for SUSE-SU-2018:2409-1 | https://www.suse.com/support/update/announcement/2018/suse-su-20182409-1/ | |
Suse | E-Mail link for SUSE-SU-2018:2409-1 | https://lists.suse.com/pipermail/sle-security-updates/2018-August/004464.html | |
Bugzilla | SUSE Bug 1027519 | https://bugzilla.suse.com/1027519 | |
Bugzilla | SUSE Bug 1091107 | https://bugzilla.suse.com/1091107 | |
Bugzilla | SUSE Bug 1103276 | https://bugzilla.suse.com/1103276 | |
CVE | SUSE CVE CVE-2018-3646 page | https://www.suse.com/security/cve/CVE-2018-3646/ |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |