[SUSE-SU-2018:4300-1] Security update for xen
Severity
Important
CVEs
9
Security update for xen
This update for xen fixes the following issues:
Update to Xen 4.10.2 bug fix release (bsc#1027519).
Security vulnerabilities fixed:
- CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowed a guest to escalate its privileges, may cause a Denial of Service (DoS) affecting the entire host, or may be able to access data it is not supposed to access. (XSA-275) (bsc#1115040)
- CVE-2018-19965: Fixed an issue related to the INVPCID instruction in case non-canonical addresses are accessed, which may allow a guest to cause Xen to crash, resulting in a Denial of Service (DoS) affecting the entire host. (XSA-279) (bsc#1115045)
- CVE-2018-19966: Fixed an issue related to a previous fix for XSA-240, which conflicted with shadow paging and allowed a guest to cause Xen to crash, resulting in a Denial of Service (DoS). (XSA-280) (bsc#1115047)
- CVE-2018-18883: Fixed an issue related to inproper restriction of nested VT-x, which allowed a guest to cause Xen to crash, resulting in a Denial of Service (DoS). (XSA-278) (bsc#1114405)
- CVE-2018-15468: Fixed incorrect MSR_DEBUGCTL handling, which allowed guests to enable Branch Trace Store and may cause a Denial of Service (DoS) of the entire host. (XSA-269) (bsc#1103276)
- CVE-2018-15469: Fixed use of v2 grant tables on ARM, which were not properly implemented and may cause a Denial of Service (DoS). (XSA-268) (bsc#1103275)
- CVE-2018-15470: Fixed an issue in the logic in oxenstored for handling writes, which allowed a guest to write memory unbounded leading to system-wide Denial of Service (DoS). (XSA-272) (bsc#1103279)
- CVE-2018-3646: Mitigations for VMM aspects of L1 Terminal Fault (XSA-273) (bsc#1091107)
Other bugs fixed:
- Fixed an issue related to a domU hang on SLE12-SP3 HV (bsc#1108940)
- Fixed an issue with xpti=no-dom0 not working as expected (bsc#1105528)
- Fixed a kernel oops related to fs/dcache.c called by d_materialise_unique() (bsc#1094508)
- ID
- SUSE-SU-2018:4300-1
- Severity
- important
- URL
- https://www.suse.com/support/update/announcement/2018/suse-su-20184300-1/
- Published
-
2018-12-28T17:38:50
(5 years ago) - Modified
-
2018-12-28T17:38:50
(5 years ago) - Rights
- Copyright 2024 SUSE LLC. All rights reserved.
- Other Advisories
-
- ALAS-2018-1058
- ALAS2-2018-1058
- ALPINE:CVE-2018-15468
- ALPINE:CVE-2018-15469
- ALPINE:CVE-2018-15470
- ALPINE:CVE-2018-18883
- ALPINE:CVE-2018-19961
- ALPINE:CVE-2018-19962
- ALPINE:CVE-2018-19965
- ALPINE:CVE-2018-19966
- ALPINE:CVE-2018-3646
- CISCO-SA-20180814-CPUSIDECHANNEL
- DSA-4274-1
- DSA-4279-1
- DSA-4369-1
- ELSA-2018-2384
- ELSA-2018-2390
- ELSA-2018-4195
- ELSA-2018-4196
- FEDORA-2018-0edb45d9db
- FEDORA-2018-1621b2204a
- FEDORA-2018-1c80fea1cd
- FEDORA-2018-2ee3411cb8
- FEDORA-2018-2fde555d91
- FEDORA-2018-3857a8b41a
- FEDORA-2018-59e4747e0f
- FEDORA-2018-683dfde81a
- FEDORA-2018-6e8c330d50
- FEDORA-2018-73dd8de892
- FEDORA-2018-79d7c3d2df
- FEDORA-2018-8422d94975
- FEDORA-2018-8e457298ce
- FEDORA-2018-915602df63
- FEDORA-2018-94315e9a6b
- FEDORA-2018-9f4381d8c4
- FEDORA-2018-a0914af224
- FEDORA-2018-a24754252a
- FEDORA-2018-b68776e5b0
- FEDORA-2018-c0a1284064
- FEDORA-2018-d77cc41f35
- FEDORA-2018-ddbaca855e
- FEDORA-2018-e820fccd83
- FEDORA-2018-f20a0cead5
- FEDORA-2018-f8cba144ae
- FEDORA-2018-fe24359b69
- FEDORA-2019-16de0047d4
- FEDORA-2019-196ab64d65
- FEDORA-2019-1b986880ea
- FEDORA-2019-1f5832fc0e
- FEDORA-2019-20a89ca9af
- FEDORA-2019-337484d88b
- FEDORA-2019-3da64f3e61
- FEDORA-2019-3e89502cb1
- FEDORA-2019-4002b91800
- FEDORA-2019-509c133845
- FEDORA-2019-65c6d11eba
- FEDORA-2019-7d3500d712
- FEDORA-2019-865bb16900
- FEDORA-2019-899ef6056c
- FEDORA-2019-a6cd583a8d
- FEDORA-2019-bce6498890
- FEDORA-2019-c36afa818c
- FEDORA-2019-ce2933b003
- FREEBSD:2310B814-A652-11E8-805B-A4BADB2F4699
- GLSA-201810-06
- RHSA-2018:2384
- RHSA-2018:2390
- RHSA-2018:2395
- SUSE-SU-2018:2328-1
- SUSE-SU-2018:2331-1
- SUSE-SU-2018:2331-2
- SUSE-SU-2018:2332-1
- SUSE-SU-2018:2335-1
- SUSE-SU-2018:2338-1
- SUSE-SU-2018:2341-1
- SUSE-SU-2018:2342-1
- SUSE-SU-2018:2344-1
- SUSE-SU-2018:2344-2
- SUSE-SU-2018:2345-1
- SUSE-SU-2018:2346-1
- SUSE-SU-2018:2347-1
- SUSE-SU-2018:2348-1
- SUSE-SU-2018:2349-1
- SUSE-SU-2018:2350-1
- SUSE-SU-2018:2351-1
- SUSE-SU-2018:2352-1
- SUSE-SU-2018:2353-1
- SUSE-SU-2018:2354-1
- SUSE-SU-2018:2355-1
- SUSE-SU-2018:2356-1
- SUSE-SU-2018:2358-1
- SUSE-SU-2018:2359-1
- SUSE-SU-2018:2362-1
- SUSE-SU-2018:2363-1
- SUSE-SU-2018:2364-1
- SUSE-SU-2018:2366-1
- SUSE-SU-2018:2367-1
- SUSE-SU-2018:2368-1
- SUSE-SU-2018:2369-1
- SUSE-SU-2018:2374-1
- SUSE-SU-2018:2380-1
- SUSE-SU-2018:2381-1
- SUSE-SU-2018:2384-1
- SUSE-SU-2018:2387-1
- SUSE-SU-2018:2389-1
- SUSE-SU-2018:2391-1
- SUSE-SU-2018:2394-1
- SUSE-SU-2018:2401-1
- SUSE-SU-2018:2409-1
- SUSE-SU-2018:2410-1
- SUSE-SU-2018:2410-2
- SUSE-SU-2018:2413-1
- SUSE-SU-2018:2414-1
- SUSE-SU-2018:2416-1
- SUSE-SU-2018:2426-1
- SUSE-SU-2018:2450-1
- SUSE-SU-2018:2472-1
- SUSE-SU-2018:2473-1
- SUSE-SU-2018:2474-1
- SUSE-SU-2018:2480-1
- SUSE-SU-2018:2482-1
- SUSE-SU-2018:2483-1
- SUSE-SU-2018:2528-1
- SUSE-SU-2018:2596-1
- SUSE-SU-2018:2637-1
- SUSE-SU-2018:2963-1
- SUSE-SU-2018:3332-1
- SUSE-SU-2018:3490-1
- SUSE-SU-2018:4070-1
- SUSE-SU-2019:0003-1
- SUSE-SU-2019:0020-1
- SUSE-SU-2019:0825-1
- SUSE-SU-2019:0827-1
- SUSE-SU-2020:0388-1
- USN-3740-1
- USN-3740-2
- USN-3741-1
- USN-3741-2
- USN-3742-1
- USN-3742-2
- USN-3756-1
- USN-3823-1
- VU:982149
- XSA-268
- XSA-269
- XSA-272
- XSA-273
- XSA-275
- XSA-278
- XSA-279
- XSA-280
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |